Attachment 148169 Details for Bug 222778 – Audit log

Audit log

audit.log (text/plain), 3.77 MB, created by David Highley on 2007-02-16 03:32:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: David Highley

Created: 2007-02-16 03:32:29 UTC

Size: 3.77 MB

patch

obsolete

>type=CRED_DISP msg=audit(1171218001.296:57664): user pid=6173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171218001.296:57665): user pid=6173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171218301.619:57666): user pid=6209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171218301.619:57667): login pid=6209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171218301.622:57668): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171218301.622:57669): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171218357.348:57670): avc:  denied  { search } for  pid=6233 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171218357.348:57670): avc:  denied  { write } for  pid=6233 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171218357.348:57670): avc:  denied  { add_name } for  pid=6233 comm="pyzor" name="DKChrX" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171218357.348:57670): avc:  denied  { create } for  pid=6233 comm="pyzor" name="DKChrX" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218357.348:57670): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171218357.348:57671): avc:  denied  { getattr } for  pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218357.348:57671): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff14e17160 a2=7fff14e17160 a3=2 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218357.348:57671):  path="/tmp/DKChrX"
>type=AVC msg=audit(1171218357.348:57672): avc:  denied  { write } for  pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218357.348:57672): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218357.348:57672):  path="/tmp/DKChrX"
>type=AVC msg=audit(1171218357.348:57673): avc:  denied  { remove_name } for  pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171218357.348:57673): avc:  denied  { unlink } for  pid=6233 comm="pyzor" name="DKChrX" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218357.348:57673): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171218357.349:57674): avc:  denied  { read } for  pid=6233 comm="pyzor" name="tmpouLNPd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218357.349:57674): arch=c000003e syscall=0 success=yes exit=367 a0=4 a1=2aaaaf34d000 a2=1000 a3=43 items=0 ppid=5015 pid=6233 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218357.349:57674):  path=2F746D702F746D706F754C4E5064202864656C6574656429
>type=AVC msg=audit(1171218362.309:57675): avc:  denied  { signal } for  pid=5015 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171218362.309:57675): arch=c000003e syscall=62 success=yes exit=0 a0=1859 a1=f a2=54 a3=0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218362.433:57676): avc:  denied  { write } for  pid=5015 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218362.433:57676): arch=c000003e syscall=2 success=yes exit=9 a0=33dae10 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218462.280:57677): avc:  denied  { append } for  pid=5015 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218462.280:57677): arch=c000003e syscall=2 success=yes exit=12 a0=32ed920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218462.280:57678): avc:  denied  { ioctl } for  pid=5015 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218462.280:57678): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218462.280:57678):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171218462.287:57679): avc:  denied  { append } for  pid=5015 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218462.287:57679): arch=c000003e syscall=2 success=yes exit=9 a0=31afed0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218462.968:57680): avc:  denied  { getattr } for  pid=6252 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218462.968:57680): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9ed4fb20 a2=7fff9ed4fb20 a3=6c6280 items=0 ppid=5015 pid=6252 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218462.968:57680):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171218462.968:57681): avc:  denied  { read } for  pid=6252 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218462.968:57681): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5015 pid=6252 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171218463.739:57682): avc:  denied  { link } for  pid=5015 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5015" dev=dm-0 ino=15632621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.739:57682): arch=c000003e syscall=86 success=yes exit=0 a0=33cef80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218463.740:57683): avc:  denied  { unlink } for  pid=5015 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5015" dev=dm-0 ino=15632621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.740:57683): arch=c000003e syscall=87 success=yes exit=0 a0=33cef80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=5015 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171218463.755:57684): avc:  denied  { write } for  pid=6247 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171218463.755:57684): avc:  denied  { add_name } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171218463.755:57684): avc:  denied  { create } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.755:57684): arch=c000003e syscall=2 success=yes exit=6 a0=61d9d0 a1=c1 a2=124 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171218463.756:57685): avc:  denied  { write } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.756:57685): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218463.756:57685):  path="/home/dhighley/_nhB.fA2zFB.douglas"
>type=AVC msg=audit(1171218463.756:57686): avc:  denied  { getattr } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.756:57686): arch=c000003e syscall=4 success=yes exit=0 a0=61d9d0 a1=7fff8be51850 a2=7fff8be51850 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171218463.756:57686):  path="/home/dhighley/_nhB.fA2zFB.douglas"
>type=AVC msg=audit(1171218463.756:57687): avc:  denied  { link } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.756:57687): arch=c000003e syscall=86 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fff8be51770 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171218463.756:57688): avc:  denied  { remove_name } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171218463.756:57688): avc:  denied  { unlink } for  pid=6247 comm="procmail" name="_nhB.fA2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.756:57688): arch=c000003e syscall=87 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fff8be51770 a3=61d9d0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171218463.757:57689): avc:  denied  { append } for  pid=6247 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171218463.757:57689): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6244 pid=6247 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171218601.956:57690): user pid=6264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171218601.957:57691): login pid=6264 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171218601.958:57692): user pid=6265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171218601.958:57693): login pid=6265 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171218601.960:57694): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171218601.960:57695): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171218601.968:57696): user pid=6265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171218601.968:57697): user pid=6265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171218601.995:57698): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171218601.995:57699): user pid=6264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171218901.293:57700): user pid=6301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171218901.293:57701): login pid=6301 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171218901.296:57702): user pid=6301 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171218901.296:57703): user pid=6301 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171219201.615:57704): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171219201.615:57705): login pid=6335 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171219201.617:57706): user pid=6336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171219201.617:57707): login pid=6336 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171219201.619:57708): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171219201.619:57709): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171219201.628:57710): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171219201.628:57711): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171219201.639:57712): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171219201.639:57713): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171219501.962:57714): user pid=6373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171219501.962:57715): login pid=6373 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171219501.965:57716): user pid=6373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171219501.965:57717): user pid=6373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171219801.289:57718): user pid=6406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171219801.289:57719): login pid=6406 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171219801.291:57720): user pid=6405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171219801.291:57721): login pid=6405 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171219801.293:57722): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171219801.293:57723): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171219801.298:57724): user pid=6406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171219801.298:57725): user pid=6406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171219801.323:57726): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171219801.324:57727): user pid=6405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171220101.623:57728): user pid=6442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171220101.623:57729): login pid=6442 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171220101.626:57730): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171220101.626:57731): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171220401.955:57732): user pid=6477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171220401.956:57733): login pid=6477 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171220401.957:57734): user pid=6476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171220401.957:57735): login pid=6476 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171220401.962:57736): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171220401.962:57737): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171220401.965:57738): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171220401.965:57739): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171220401.988:57740): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171220401.988:57741): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171220461.282:57742): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171220461.282:57743): login pid=6492 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171220461.286:57744): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171220461.286:57745): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171220462.195:57746): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171220462.196:57747): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171220701.206:57748): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171220701.206:57749): login pid=6527 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171220701.210:57750): user pid=6527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171220701.211:57751): user pid=6527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171220710.238:57752): avc:  denied  { search } for  pid=6547 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171220710.238:57752): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5015 pid=6547 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171221001.532:57753): user pid=6576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221001.532:57754): login pid=6576 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171221001.534:57755): user pid=6577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221001.535:57756): login pid=6577 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171221001.536:57757): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221001.536:57758): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171221001.539:57759): user pid=6577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221001.539:57760): user pid=6577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171221001.557:57761): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171221001.558:57762): user pid=6576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171221187.232:57763): user pid=5544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171221187.232:57764): user pid=5544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171221301.238:57765): user pid=6616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221301.238:57766): login pid=6616 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171221301.242:57767): user pid=6616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221301.242:57768): user pid=6616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171221601.564:57769): user pid=6650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221601.564:57770): login pid=6650 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171221601.566:57771): user pid=6651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221601.567:57772): login pid=6651 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171221601.567:57773): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221601.567:57774): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171221601.579:57775): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221601.579:57776): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171221601.585:57777): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171221601.586:57778): user pid=6650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171221746.993:57779): avc:  denied  { search } for  pid=6684 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171221746.993:57779): avc:  denied  { write } for  pid=6684 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171221746.993:57779): avc:  denied  { add_name } for  pid=6684 comm="pyzor" name="n3wQx_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171221746.993:57779): avc:  denied  { create } for  pid=6684 comm="pyzor" name="n3wQx_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221746.993:57779): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171221746.993:57780): avc:  denied  { getattr } for  pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221746.993:57780): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff650194b0 a2=7fff650194b0 a3=3 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171221746.993:57780):  path="/tmp/n3wQx_"
>type=AVC msg=audit(1171221746.993:57781): avc:  denied  { write } for  pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221746.993:57781): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171221746.993:57781):  path="/tmp/n3wQx_"
>type=AVC msg=audit(1171221746.993:57782): avc:  denied  { remove_name } for  pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171221746.993:57782): avc:  denied  { unlink } for  pid=6684 comm="pyzor" name="n3wQx_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221746.993:57782): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171221746.994:57783): avc:  denied  { read } for  pid=6684 comm="pyzor" name="tmpW7dRUn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221746.994:57783): arch=c000003e syscall=0 success=yes exit=1067 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=6684 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171221746.994:57783):  path=2F746D702F746D7057376452556E202864656C6574656429
>type=AVC msg=audit(1171221752.296:57784): avc:  denied  { write } for  pid=6680 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171221752.296:57784): avc:  denied  { add_name } for  pid=6680 comm="procmail" name="_YoB.4z2zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171221752.296:57784): arch=c000003e syscall=2 success=yes exit=6 a0=61b5e0 a1=c1 a2=124 a3=61b5e0 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171221752.297:57785): avc:  denied  { remove_name } for  pid=6680 comm="procmail" name="_YoB.4z2zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171221752.297:57785): arch=c000003e syscall=87 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff717e7620 a3=61b5e0 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171221752.297:57786): avc:  denied  { append } for  pid=6680 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171221752.297:57786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=6675 pid=6680 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171221901.899:57787): user pid=6698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171221901.900:57788): login pid=6698 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171221901.903:57789): user pid=6698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171221901.903:57790): user pid=6698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171222201.228:57791): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171222201.229:57792): login pid=6734 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171222201.230:57793): user pid=6735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171222201.230:57794): login pid=6735 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171222201.232:57795): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171222201.232:57796): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171222201.243:57797): user pid=6735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171222201.244:57798): user pid=6735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171222201.252:57799): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171222201.252:57800): user pid=6734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171222501.567:57801): user pid=6769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171222501.567:57802): login pid=6769 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171222501.571:57803): user pid=6769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171222501.571:57804): user pid=6769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171222801.898:57805): user pid=6802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171222801.898:57806): login pid=6802 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171222801.900:57807): user pid=6803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171222801.900:57808): login pid=6803 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171222801.902:57809): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171222801.902:57810): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171222801.904:57811): user pid=6803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171222801.904:57812): user pid=6803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171222801.933:57813): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171222801.933:57814): user pid=6802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171222887.873:57815): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171222887.874:57816): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171222897.562:57817): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171222897.563:57818): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171222897.572:57819): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171222897.580:57820): login pid=3672 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171222897.590:57821): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171222897.590:57822): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=AVC msg=audit(1171222960.643:57823): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222960.643:57823): arch=c000003e syscall=2 success=yes exit=12 a0=3140270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171222960.643:57824): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222960.643:57824): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222960.643:57824):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171222960.649:57825): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222960.649:57825): arch=c000003e syscall=2 success=yes exit=9 a0=313c3a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171222961.318:57826): avc:  denied  { getattr } for  pid=7063 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.318:57826): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8dfe1f80 a2=7fff8dfe1f80 a3=6c6280 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222961.318:57826):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171222961.318:57827): avc:  denied  { read } for  pid=7063 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.318:57827): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171222961.319:57828): avc:  denied  { search } for  pid=7063 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.319:57828): avc:  denied  { write } for  pid=7063 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.319:57828): avc:  denied  { add_name } for  pid=7063 comm="pyzor" name="kTNeBL" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.319:57828): avc:  denied  { create } for  pid=7063 comm="pyzor" name="kTNeBL" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.319:57828): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171222961.319:57829): avc:  denied  { getattr } for  pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.319:57829): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8dfe0880 a2=7fff8dfe0880 a3=2 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222961.319:57829):  path="/tmp/kTNeBL"
>type=AVC msg=audit(1171222961.319:57830): avc:  denied  { write } for  pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.319:57830): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222961.319:57830):  path="/tmp/kTNeBL"
>type=AVC msg=audit(1171222961.319:57831): avc:  denied  { remove_name } for  pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.319:57831): avc:  denied  { unlink } for  pid=7063 comm="pyzor" name="kTNeBL" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.319:57831): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7063 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171222961.732:57832): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.732:57832): arch=c000003e syscall=86 success=yes exit=0 a0=30ff520 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171222961.732:57833): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.732:57833): arch=c000003e syscall=87 success=yes exit=0 a0=30ff520 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171222961.733:57834): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.733:57834): arch=c000003e syscall=2 success=yes exit=9 a0=3034ac0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171222961.777:57835): avc:  denied  { write } for  pid=7052 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.777:57835): avc:  denied  { add_name } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.777:57835): avc:  denied  { create } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.777:57835): arch=c000003e syscall=2 success=yes exit=6 a0=61cb10 a1=c1 a2=124 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171222961.777:57836): avc:  denied  { write } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.777:57836): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222961.777:57836):  path="/home/dhighley/_MuB.xG3zFB.douglas"
>type=AVC msg=audit(1171222961.778:57837): avc:  denied  { getattr } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.778:57837): arch=c000003e syscall=4 success=yes exit=0 a0=61cb10 a1=7fff900ac000 a2=7fff900ac000 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171222961.778:57837):  path="/home/dhighley/_MuB.xG3zFB.douglas"
>type=AVC msg=audit(1171222961.778:57838): avc:  denied  { link } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.778:57838): arch=c000003e syscall=86 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff900abf20 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171222961.778:57839): avc:  denied  { remove_name } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171222961.778:57839): avc:  denied  { unlink } for  pid=7052 comm="procmail" name="_MuB.xG3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.778:57839): arch=c000003e syscall=87 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff900abf20 a3=61cb10 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171222961.778:57840): avc:  denied  { append } for  pid=7052 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171222961.778:57840): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7049 pid=7052 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171222996.856:57841): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171222996.857:57842): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171222996.867:57843): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171222996.868:57844): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171223065.047:57845): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171223065.047:57846): user pid=7071 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171223101.240:57847): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171223101.241:57848): login pid=7173 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171223101.243:57849): user pid=7173 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171223101.244:57850): user pid=7173 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171223401.584:57851): user pid=7224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171223401.585:57852): login pid=7224 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171223401.587:57853): user pid=7225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171223401.588:57854): login pid=7225 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171223401.590:57855): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171223401.590:57856): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171223401.593:57857): user pid=7225 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171223401.594:57858): user pid=7225 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171223401.613:57859): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171223401.613:57860): user pid=7224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171223500.701:57861): avc:  denied  { search } for  pid=7253 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171223500.701:57861): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171223500.702:57862): avc:  denied  { search } for  pid=7253 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171223500.702:57862): avc:  denied  { write } for  pid=7253 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171223500.702:57862): avc:  denied  { add_name } for  pid=7253 comm="pyzor" name="MXO48S" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171223500.702:57862): avc:  denied  { create } for  pid=7253 comm="pyzor" name="MXO48S" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223500.702:57862): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171223500.703:57863): avc:  denied  { getattr } for  pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223500.703:57863): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1dfae850 a2=7fff1dfae850 a3=2 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171223500.703:57863):  path="/tmp/MXO48S"
>type=AVC msg=audit(1171223500.703:57864): avc:  denied  { write } for  pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223500.703:57864): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171223500.703:57864):  path="/tmp/MXO48S"
>type=AVC msg=audit(1171223500.703:57865): avc:  denied  { remove_name } for  pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171223500.703:57865): avc:  denied  { unlink } for  pid=7253 comm="pyzor" name="MXO48S" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223500.703:57865): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171223500.705:57866): avc:  denied  { read } for  pid=7253 comm="pyzor" name="tmpbFi8Le" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223500.705:57866): arch=c000003e syscall=0 success=yes exit=1446 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=6550 pid=7253 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171223500.705:57866):  path=2F746D702F746D70624669384C65202864656C6574656429
>type=AVC msg=audit(1171223504.274:57867): avc:  denied  { write } for  pid=7249 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171223504.274:57867): avc:  denied  { add_name } for  pid=7249 comm="procmail" name="_RxB.QP3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171223504.274:57867): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171223504.274:57868): avc:  denied  { remove_name } for  pid=7249 comm="procmail" name="_RxB.QP3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171223504.274:57868): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cff0 a2=7fffa2e44760 a3=61b670 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171223504.275:57869): avc:  denied  { append } for  pid=7249 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171223504.275:57869): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7246 pid=7249 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171223701.919:57870): user pid=7274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171223701.920:57871): login pid=7274 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171223701.924:57872): user pid=7274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171223701.924:57873): user pid=7274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171224001.272:57874): user pid=7309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224001.272:57875): login pid=7309 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171224001.275:57876): user pid=7310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224001.275:57877): login pid=7310 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171224001.276:57878): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224001.276:57879): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171224001.277:57880): user pid=7311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224001.277:57881): login pid=7311 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171224001.282:57882): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224001.282:57883): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171224001.289:57884): user pid=7311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224001.289:57885): user pid=7311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171224001.314:57886): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171224001.315:57887): user pid=7309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171224061.611:57888): user pid=7330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224061.611:57889): login pid=7330 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171224061.614:57890): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224061.614:57891): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171224062.507:57892): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171224062.507:57893): user pid=7330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171224301.515:57894): user pid=7372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224301.515:57895): login pid=7372 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171224301.519:57896): user pid=7372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224301.520:57897): user pid=7372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171224309.258:57898): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224309.258:57898): arch=c000003e syscall=2 success=yes exit=12 a0=3273ee0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224309.259:57899): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224309.259:57899): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224309.259:57899):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171224309.272:57900): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224309.272:57900): arch=c000003e syscall=2 success=yes exit=9 a0=326cb50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224309.874:57901): avc:  denied  { getattr } for  pid=7390 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224309.874:57901): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc8f1aec0 a2=7fffc8f1aec0 a3=6c6280 items=0 ppid=6550 pid=7390 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224309.874:57901):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171224309.875:57902): avc:  denied  { read } for  pid=7390 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224309.875:57902): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7390 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224314.837:57903): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171224314.837:57903): arch=c000003e syscall=62 success=yes exit=0 a0=1cde a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224314.852:57904): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.852:57904): arch=c000003e syscall=86 success=yes exit=0 a0=326cd40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224314.852:57905): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.852:57905): arch=c000003e syscall=87 success=yes exit=0 a0=326cd40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224314.853:57906): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.853:57906): arch=c000003e syscall=2 success=yes exit=9 a0=309ffc0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224314.863:57907): avc:  denied  { create } for  pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.863:57907): arch=c000003e syscall=2 success=yes exit=6 a0=620550 a1=c1 a2=124 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224314.864:57908): avc:  denied  { write } for  pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.864:57908): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224314.864:57908):  path="/home/dhighley/_azB.6b3zFB.douglas"
>type=AVC msg=audit(1171224314.864:57909): avc:  denied  { getattr } for  pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.864:57909): arch=c000003e syscall=4 success=yes exit=0 a0=620550 a1=7fff4bad44d0 a2=7fff4bad44d0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224314.864:57909):  path="/home/dhighley/_azB.6b3zFB.douglas"
>type=AVC msg=audit(1171224314.864:57910): avc:  denied  { link } for  pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.864:57910): arch=c000003e syscall=86 success=yes exit=0 a0=620550 a1=620530 a2=7fff4bad43f0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224314.864:57911): avc:  denied  { unlink } for  pid=7386 comm="procmail" name="_azB.6b3zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224314.864:57911): arch=c000003e syscall=87 success=yes exit=0 a0=620550 a1=620530 a2=7fff4bad43f0 a3=620550 items=0 ppid=7383 pid=7386 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_END msg=audit(1171224493.462:57912): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171224493.462:57913): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171224601.861:57914): user pid=7479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171224601.861:57915): user pid=7478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224601.862:57916): login pid=7478 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171224601.862:57917): login pid=7479 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171224601.866:57918): user pid=7479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224601.867:57919): user pid=7479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171224601.869:57920): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224601.870:57921): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171224601.897:57922): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171224601.897:57923): user pid=7478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171224773.684:57924): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224773.684:57924): arch=c000003e syscall=2 success=yes exit=12 a0=31dd8e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224773.685:57925): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224773.685:57925): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224773.685:57925):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171224774.342:57926): avc:  denied  { search } for  pid=7517 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171224774.342:57926): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224774.342:57927): avc:  denied  { getattr } for  pid=7517 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.342:57927): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff961bd780 a2=7fff961bd780 a3=6c6280 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224774.342:57927):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171224774.342:57928): avc:  denied  { read } for  pid=7517 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.342:57928): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224774.343:57929): avc:  denied  { search } for  pid=7517 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171224774.343:57929): avc:  denied  { write } for  pid=7517 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171224774.343:57929): avc:  denied  { add_name } for  pid=7517 comm="pyzor" name="8GxIR1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171224774.343:57929): avc:  denied  { create } for  pid=7517 comm="pyzor" name="8GxIR1" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.343:57929): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224774.343:57930): avc:  denied  { getattr } for  pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.343:57930): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff961bc080 a2=7fff961bc080 a3=2 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224774.343:57930):  path="/tmp/8GxIR1"
>type=AVC msg=audit(1171224774.343:57931): avc:  denied  { write } for  pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.343:57931): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224774.343:57931):  path="/tmp/8GxIR1"
>type=AVC msg=audit(1171224774.343:57932): avc:  denied  { remove_name } for  pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171224774.343:57932): avc:  denied  { unlink } for  pid=7517 comm="pyzor" name="8GxIR1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.343:57932): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224774.346:57933): avc:  denied  { read } for  pid=7517 comm="pyzor" name="tmp-mFXqZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224774.346:57933): arch=c000003e syscall=0 success=yes exit=984 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=6550 pid=7517 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224774.346:57933):  path=2F746D702F746D702D6D4658715A202864656C6574656429
>type=AVC msg=audit(1171224779.304:57934): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171224779.304:57934): arch=c000003e syscall=62 success=yes exit=0 a0=1d5d a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224779.531:57935): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.531:57935): arch=c000003e syscall=86 success=yes exit=0 a0=3049680 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224779.531:57936): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.531:57936): arch=c000003e syscall=87 success=yes exit=0 a0=3049680 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224779.546:57937): avc:  denied  { write } for  pid=7513 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171224779.546:57937): avc:  denied  { add_name } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171224779.546:57937): avc:  denied  { create } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.546:57937): arch=c000003e syscall=2 success=yes exit=6 a0=61cc30 a1=c1 a2=124 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224779.546:57938): avc:  denied  { write } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.546:57938): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224779.546:57938):  path="/home/phighley/_Z1B.Lj3zFB.douglas"
>type=AVC msg=audit(1171224779.547:57939): avc:  denied  { getattr } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.547:57939): arch=c000003e syscall=4 success=yes exit=0 a0=61cc30 a1=7fff1f899280 a2=7fff1f899280 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224779.547:57939):  path="/home/phighley/_Z1B.Lj3zFB.douglas"
>type=AVC msg=audit(1171224779.547:57940): avc:  denied  { link } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.547:57940): arch=c000003e syscall=86 success=yes exit=0 a0=61cc30 a1=61b530 a2=7fff1f8991a0 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224779.547:57941): avc:  denied  { remove_name } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171224779.547:57941): avc:  denied  { unlink } for  pid=7513 comm="procmail" name="_Z1B.Lj3zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.547:57941): arch=c000003e syscall=87 success=yes exit=0 a0=61cc30 a1=61b530 a2=7fff1f8991a0 a3=61cc30 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224779.547:57942): avc:  denied  { append } for  pid=7513 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.547:57942): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171224779.547:57943): avc:  denied  { lock } for  pid=7513 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224779.547:57943): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=7508 pid=7513 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224779.547:57943):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171224901.199:57944): user pid=7529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171224901.199:57945): login pid=7529 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171224901.203:57946): user pid=7529 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171224901.203:57947): user pid=7529 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171224944.606:57948): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224944.606:57948): arch=c000003e syscall=2 success=yes exit=9 a0=320b4f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224945.324:57949): avc:  denied  { getattr } for  pid=7552 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224945.324:57949): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7fb04ab0 a2=7fff7fb04ab0 a3=6c6280 items=0 ppid=6550 pid=7552 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224945.324:57949):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171224945.324:57950): avc:  denied  { read } for  pid=7552 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224945.324:57950): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7552 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171224950.288:57951): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171224950.288:57951): arch=c000003e syscall=62 success=yes exit=0 a0=1d80 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224950.401:57952): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224950.401:57952): arch=c000003e syscall=2 success=yes exit=9 a0=32913d0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224950.404:57953): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224950.404:57953): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171224950.404:57953):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171224950.405:57954): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224950.405:57954): arch=c000003e syscall=87 success=yes exit=0 a0=2dff4d0 a1=1cd3ad0 a2=37a0b12b60 a3=3238c30 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171224950.410:57955): avc:  denied  { link } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171224950.410:57955): arch=c000003e syscall=86 success=yes exit=0 a0=30937e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171225201.534:57956): user pid=7576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171225201.535:57957): login pid=7576 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171225201.537:57958): user pid=7577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171225201.537:57959): login pid=7577 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171225201.539:57960): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171225201.539:57961): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171225201.555:57962): user pid=7577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171225201.556:57963): user pid=7577 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171225201.559:57964): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171225201.559:57965): user pid=7576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171225501.891:57966): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171225501.892:57967): login pid=7614 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171225501.894:57968): user pid=7614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171225501.894:57969): user pid=7614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171225801.223:57970): user pid=7647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171225801.223:57971): login pid=7647 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171225801.225:57972): user pid=7648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171225801.226:57973): login pid=7648 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171225801.226:57974): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171225801.226:57975): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171225801.228:57976): user pid=7648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171225801.228:57977): user pid=7648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171225801.248:57978): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171225801.249:57979): user pid=7647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171226101.572:57980): user pid=7682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171226101.572:57981): login pid=7682 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171226101.576:57982): user pid=7682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171226101.576:57983): user pid=7682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171226397.365:57984): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226397.365:57984): arch=c000003e syscall=2 success=yes exit=12 a0=32a0650 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171226398.637:57985): avc:  denied  { write } for  pid=7723 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171226398.637:57985): avc:  denied  { add_name } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171226398.637:57985): avc:  denied  { create } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.637:57985): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171226398.638:57986): avc:  denied  { write } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.638:57986): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171226398.638:57986):  path="/home/dhighley/_r4B.e83zFB.douglas"
>type=AVC msg=audit(1171226398.638:57987): avc:  denied  { getattr } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.638:57987): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff691f4bf0 a2=7fff691f4bf0 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171226398.638:57987):  path="/home/dhighley/_r4B.e83zFB.douglas"
>type=AVC msg=audit(1171226398.638:57988): avc:  denied  { link } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.638:57988): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d9e0 a2=7fff691f4b10 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171226398.638:57989): avc:  denied  { remove_name } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171226398.638:57989): avc:  denied  { unlink } for  pid=7723 comm="procmail" name="_r4B.e83zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.638:57989): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d9e0 a2=7fff691f4b10 a3=61b650 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171226398.639:57990): avc:  denied  { append } for  pid=7723 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171226398.639:57990): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7718 pid=7723 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171226401.897:57991): user pid=7728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171226401.897:57992): login pid=7728 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171226401.897:57993): user pid=7729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171226401.897:57994): login pid=7729 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171226401.903:57995): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171226401.903:57996): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171226401.904:57997): user pid=7729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171226401.904:57998): user pid=7729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171226401.928:57999): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171226401.928:58000): user pid=7728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171226498.094:58001): avc:  denied  { search } for  pid=7756 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171226498.094:58001): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=7756 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171226701.231:58002): user pid=7773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171226701.232:58003): login pid=7773 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171226701.236:58004): user pid=7773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171226701.236:58005): user pid=7773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171227001.567:58006): user pid=7807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227001.567:58007): login pid=7807 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171227001.570:58008): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227001.570:58009): login pid=7808 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171227001.573:58010): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227001.573:58011): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171227001.576:58012): user pid=7808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227001.576:58013): user pid=7808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171227001.591:58014): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171227001.591:58015): user pid=7807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171227006.379:58016): avc:  denied  { search } for  pid=7830 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171227006.379:58016): avc:  denied  { write } for  pid=7830 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171227006.379:58016): avc:  denied  { add_name } for  pid=7830 comm="pyzor" name="VGdMuQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171227006.379:58016): avc:  denied  { create } for  pid=7830 comm="pyzor" name="VGdMuQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227006.379:58016): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171227006.379:58017): avc:  denied  { getattr } for  pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227006.379:58017): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0e076510 a2=7fff0e076510 a3=3 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171227006.379:58017):  path="/tmp/VGdMuQ"
>type=AVC msg=audit(1171227006.379:58018): avc:  denied  { write } for  pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227006.379:58018): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171227006.379:58018):  path="/tmp/VGdMuQ"
>type=AVC msg=audit(1171227006.380:58019): avc:  denied  { remove_name } for  pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171227006.380:58019): avc:  denied  { unlink } for  pid=7830 comm="pyzor" name="VGdMuQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227006.380:58019): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171227006.380:58020): avc:  denied  { read } for  pid=7830 comm="pyzor" name="tmpDnGzX6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227006.380:58020): arch=c000003e syscall=0 success=yes exit=1132 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=7830 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171227006.380:58020):  path=2F746D702F746D70446E477A5836202864656C6574656429
>type=AVC msg=audit(1171227011.472:58021): avc:  denied  { append } for  pid=7826 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171227011.472:58021): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=7821 pid=7826 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171227301.900:58022): user pid=7856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227301.900:58023): login pid=7856 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171227301.903:58024): user pid=7856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227301.903:58025): user pid=7856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171227601.237:58026): user pid=7892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227601.238:58027): login pid=7892 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171227601.239:58028): user pid=7893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227601.239:58029): login pid=7893 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171227601.244:58030): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227601.244:58031): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171227601.250:58032): user pid=7893 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227601.250:58033): user pid=7893 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171227601.264:58034): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171227601.264:58035): user pid=7892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171227661.568:58036): user pid=7908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227661.569:58037): login pid=7908 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171227661.573:58038): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227661.573:58039): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171227662.453:58040): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171227662.453:58041): user pid=7908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171227901.461:58042): user pid=7945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171227901.461:58043): login pid=7945 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171227901.465:58044): user pid=7945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171227901.465:58045): user pid=7945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171228201.788:58046): user pid=7980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171228201.788:58047): login pid=7980 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171228201.789:58048): user pid=7979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171228201.789:58049): login pid=7979 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171228201.792:58050): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171228201.792:58051): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171228201.794:58052): user pid=7980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171228201.794:58053): user pid=7980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171228201.811:58054): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171228201.811:58055): user pid=7979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171228472.794:58056): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228472.794:58056): arch=c000003e syscall=2 success=yes exit=12 a0=32a95d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228472.794:58057): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228472.794:58057): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171228472.794:58057):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171228472.800:58058): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228472.800:58058): arch=c000003e syscall=2 success=yes exit=9 a0=32a20b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228473.601:58059): avc:  denied  { getattr } for  pid=8027 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228473.601:58059): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe7eee7d0 a2=7fffe7eee7d0 a3=6c6280 items=0 ppid=6550 pid=8027 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171228473.601:58059):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171228473.601:58060): avc:  denied  { read } for  pid=8027 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228473.601:58060): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8027 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171228478.563:58061): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171228478.563:58061): arch=c000003e syscall=62 success=yes exit=0 a0=1f5b a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228478.860:58062): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.860:58062): arch=c000003e syscall=86 success=yes exit=0 a0=20e5d10 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228478.861:58063): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.861:58063): arch=c000003e syscall=87 success=yes exit=0 a0=20e5d10 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228478.862:58064): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.862:58064): arch=c000003e syscall=2 success=yes exit=9 a0=32d1860 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171228478.955:58065): avc:  denied  { write } for  pid=8023 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171228478.955:58065): avc:  denied  { add_name } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171228478.955:58065): avc:  denied  { create } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.955:58065): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171228478.956:58066): avc:  denied  { write } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.956:58066): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171228478.956:58066):  path="/home/dhighley/_X9B.-c4zFB.douglas"
>type=AVC msg=audit(1171228478.956:58067): avc:  denied  { getattr } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.956:58067): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff53af44f0 a2=7fff53af44f0 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171228478.956:58067):  path="/home/dhighley/_X9B.-c4zFB.douglas"
>type=AVC msg=audit(1171228478.956:58068): avc:  denied  { link } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.956:58068): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff53af4410 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171228478.956:58069): avc:  denied  { remove_name } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171228478.956:58069): avc:  denied  { unlink } for  pid=8023 comm="procmail" name="_X9B.-c4zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171228478.956:58069): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff53af4410 a3=61b650 items=0 ppid=8018 pid=8023 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171228501.132:58070): user pid=8032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171228501.132:58071): login pid=8032 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171228501.136:58072): user pid=8032 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171228501.136:58073): user pid=8032 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171228801.471:58074): user pid=8064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171228801.471:58075): login pid=8064 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171228801.473:58076): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171228801.474:58077): login pid=8065 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171228801.475:58078): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171228801.475:58079): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171228801.486:58080): user pid=8065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171228801.486:58081): user pid=8065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171228801.498:58082): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171228801.498:58083): user pid=8064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171229101.821:58084): user pid=8101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171229101.821:58085): login pid=8101 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171229101.824:58086): user pid=8101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171229101.824:58087): user pid=8101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171229401.147:58088): user pid=8135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171229401.147:58089): login pid=8135 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171229401.149:58090): user pid=8136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171229401.150:58091): login pid=8136 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171229401.152:58092): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171229401.152:58093): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171229401.161:58094): user pid=8136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171229401.161:58095): user pid=8136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171229401.173:58096): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171229401.173:58097): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171229701.495:58098): user pid=8181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171229701.495:58099): login pid=8181 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171229701.499:58100): user pid=8181 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171229701.499:58101): user pid=8181 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171230001.833:58102): user pid=8216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230001.833:58103): login pid=8216 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171230001.836:58104): user pid=8217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230001.836:58105): login pid=8217 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171230001.839:58106): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230001.839:58107): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171230001.841:58108): user pid=8217 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230001.841:58109): user pid=8217 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171230001.862:58110): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171230001.862:58111): user pid=8216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171230301.182:58112): user pid=8255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230301.183:58113): login pid=8255 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171230301.186:58114): user pid=8255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230301.186:58115): user pid=8255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171230601.507:58116): user pid=8289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230601.507:58117): login pid=8289 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171230601.508:58118): user pid=8290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230601.508:58119): login pid=8290 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171230601.512:58120): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230601.513:58121): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171230601.517:58122): user pid=8290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230601.518:58123): user pid=8290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171230601.532:58124): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171230601.532:58125): user pid=8289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171230901.846:58126): user pid=8326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171230901.846:58127): login pid=8326 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171230901.850:58128): user pid=8326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171230901.850:58129): user pid=8326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171231075.686:58130): avc:  denied  { search } for  pid=8360 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171231075.686:58130): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171231075.687:58131): avc:  denied  { create } for  pid=8360 comm="pyzor" name="q9xkiq" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231075.687:58131): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171231075.687:58132): avc:  denied  { getattr } for  pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231075.687:58132): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2ed33b50 a2=7fff2ed33b50 a3=3 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171231075.687:58132):  path="/tmp/q9xkiq"
>type=AVC msg=audit(1171231075.687:58133): avc:  denied  { write } for  pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231075.687:58133): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171231075.687:58133):  path="/tmp/q9xkiq"
>type=AVC msg=audit(1171231075.687:58134): avc:  denied  { unlink } for  pid=8360 comm="pyzor" name="q9xkiq" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231075.687:58134): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171231075.688:58135): avc:  denied  { read } for  pid=8360 comm="pyzor" name="tmpjvMVDm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231075.688:58135): arch=c000003e syscall=0 success=yes exit=2830 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=8360 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171231075.688:58135):  path=2F746D702F746D706A764D56446D202864656C6574656429
>type=AVC msg=audit(1171231080.670:58136): avc:  denied  { append } for  pid=8356 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231080.670:58136): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=8351 pid=8356 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171231201.185:58137): user pid=8372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231201.185:58138): login pid=8372 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171231201.186:58139): user pid=8373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231201.186:58140): login pid=8373 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171231201.191:58141): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231201.191:58142): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171231201.194:58143): user pid=8373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231201.194:58144): user pid=8373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171231201.221:58145): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171231201.221:58146): user pid=8372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171231261.514:58147): user pid=8388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231261.514:58148): login pid=8388 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171231261.517:58149): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231261.517:58150): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171231262.399:58151): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171231262.399:58152): user pid=8388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171231501.408:58153): user pid=8431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231501.409:58154): login pid=8431 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171231501.412:58155): user pid=8431 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231501.412:58156): user pid=8431 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171231509.018:58157): avc:  denied  { search } for  pid=8451 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171231509.018:58157): avc:  denied  { write } for  pid=8451 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171231509.018:58157): avc:  denied  { add_name } for  pid=8451 comm="pyzor" name="uFMFof" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171231509.018:58157): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=8451 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171231509.018:58158): avc:  denied  { remove_name } for  pid=8451 comm="pyzor" name="uFMFof" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171231509.018:58158): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8451 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171231509.270:58159): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.270:58159): arch=c000003e syscall=2 success=yes exit=9 a0=30e0460 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171231509.280:58160): avc:  denied  { write } for  pid=8447 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171231509.280:58160): avc:  denied  { add_name } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171231509.280:58160): avc:  denied  { create } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.280:58160): arch=c000003e syscall=2 success=yes exit=6 a0=61b5e0 a1=c1 a2=124 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171231509.280:58161): avc:  denied  { write } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.280:58161): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171231509.280:58161):  path="/home/dhighley/__DC.VM5zFB.douglas"
>type=AVC msg=audit(1171231509.280:58162): avc:  denied  { getattr } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.280:58162): arch=c000003e syscall=4 success=yes exit=0 a0=61b5e0 a1=7fff05555f30 a2=7fff05555f30 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171231509.280:58162):  path="/home/dhighley/__DC.VM5zFB.douglas"
>type=AVC msg=audit(1171231509.281:58163): avc:  denied  { link } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.281:58163): arch=c000003e syscall=86 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff05555e50 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171231509.281:58164): avc:  denied  { remove_name } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171231509.281:58164): avc:  denied  { unlink } for  pid=8447 comm="procmail" name="__DC.VM5zFB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171231509.281:58164): arch=c000003e syscall=87 success=yes exit=0 a0=61b5e0 a1=61b540 a2=7fff05555e50 a3=61b5e0 items=0 ppid=8442 pid=8447 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171231801.741:58165): user pid=8479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231801.742:58166): login pid=8479 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171231801.744:58167): user pid=8480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171231801.744:58168): login pid=8480 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171231801.745:58169): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231801.746:58170): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171231801.756:58171): user pid=8480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171231801.756:58172): user pid=8480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171231801.766:58173): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171231801.766:58174): user pid=8479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171231990.467:58175): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171231990.467:58176): user pid=7310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171232101.473:58177): user pid=8519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171232101.473:58178): login pid=8519 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171232101.477:58179): user pid=8519 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171232101.478:58180): user pid=8519 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171232401.815:58181): user pid=8552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171232401.816:58182): login pid=8552 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171232401.818:58183): user pid=8553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171232401.818:58184): login pid=8553 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171232401.822:58185): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171232401.822:58186): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171232401.824:58187): user pid=8553 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171232401.824:58188): user pid=8553 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171232401.851:58189): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171232401.852:58190): user pid=8552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171232701.156:58191): user pid=8588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171232701.156:58192): login pid=8588 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171232701.161:58193): user pid=8588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171232701.161:58194): user pid=8588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171233001.484:58195): user pid=8623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233001.484:58196): login pid=8623 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171233001.486:58197): user pid=8624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233001.487:58198): login pid=8624 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171233001.488:58199): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233001.489:58200): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171233001.499:58201): user pid=8624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233001.499:58202): user pid=8624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171233001.508:58203): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171233001.509:58204): user pid=8623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171233301.819:58205): user pid=8659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233301.819:58206): login pid=8659 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171233301.823:58207): user pid=8659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233301.824:58208): user pid=8659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171233522.479:58209): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233522.479:58209): arch=c000003e syscall=2 success=yes exit=12 a0=32f4b60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171233522.479:58210): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233522.479:58210): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171233522.479:58210):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171233522.485:58211): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233522.485:58211): arch=c000003e syscall=2 success=yes exit=9 a0=31e5640 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171233523.825:58212): avc:  denied  { getattr } for  pid=8695 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233523.825:58212): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb169e640 a2=7fffb169e640 a3=6c6280 items=0 ppid=6550 pid=8695 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171233523.825:58212):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171233523.826:58213): avc:  denied  { read } for  pid=8695 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233523.826:58213): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8695 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171233528.790:58214): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171233528.790:58214): arch=c000003e syscall=62 success=yes exit=0 a0=21f7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171233528.911:58215): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233528.911:58215): arch=c000003e syscall=86 success=yes exit=0 a0=31afd50 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171233528.911:58216): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171233528.911:58216): arch=c000003e syscall=87 success=yes exit=0 a0=31afd50 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171233601.158:58217): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233601.159:58218): login pid=8703 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171233601.161:58219): user pid=8704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233601.161:58220): login pid=8704 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171233601.161:58221): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233601.161:58222): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171233601.175:58223): user pid=8704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233601.175:58224): user pid=8704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171233601.181:58225): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171233601.181:58226): user pid=8703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171233901.495:58227): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171233901.495:58228): login pid=8744 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171233901.499:58229): user pid=8744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171233901.499:58230): user pid=8744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171234201.503:58231): avc:  denied  { search } for  pid=8789 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171234201.503:58231): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234201.504:58232): avc:  denied  { create } for  pid=8789 comm="pyzor" name="r_iA-f" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234201.504:58232): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234201.505:58233): avc:  denied  { getattr } for  pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234201.505:58233): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff12a24ec0 a2=7fff12a24ec0 a3=3 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171234201.505:58233):  path="/tmp/r_iA-f"
>type=AVC msg=audit(1171234201.505:58234): avc:  denied  { write } for  pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234201.505:58234): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171234201.505:58234):  path="/tmp/r_iA-f"
>type=AVC msg=audit(1171234201.505:58235): avc:  denied  { unlink } for  pid=8789 comm="pyzor" name="r_iA-f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234201.505:58235): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234201.505:58236): avc:  denied  { read } for  pid=8789 comm="pyzor" name="tmpQtfhWN" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234201.505:58236): arch=c000003e syscall=0 success=yes exit=933 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=8789 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171234201.505:58236):  path=2F746D702F746D7051746668574E202864656C6574656429
>type=USER_ACCT msg=audit(1171234201.821:58237): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234201.821:58238): login pid=8790 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171234201.821:58239): user pid=8791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234201.822:58240): login pid=8791 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171234201.825:58241): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234201.825:58242): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171234201.830:58243): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234201.830:58244): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171234201.846:58245): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171234201.846:58246): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171234501.167:58247): user pid=8825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234501.167:58248): login pid=8825 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171234501.171:58249): user pid=8825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234501.171:58250): user pid=8825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171234801.504:58251): user pid=8860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234801.504:58252): login pid=8860 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171234801.506:58253): user pid=8861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234801.506:58254): login pid=8861 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171234801.508:58255): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234801.508:58256): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171234801.509:58257): user pid=8862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234801.509:58258): login pid=8862 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171234801.519:58259): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234801.519:58260): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171234801.520:58261): user pid=8862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234801.521:58262): user pid=8862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171234801.533:58263): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171234801.534:58264): user pid=8860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171234861.859:58265): user pid=8881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171234861.860:58266): login pid=8881 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171234861.864:58267): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171234861.864:58268): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171234862.746:58269): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171234862.747:58270): user pid=8881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171234877.379:58271): avc:  denied  { getattr } for  pid=8905 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234877.379:58271): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffb1b8160 a2=7ffffb1b8160 a3=6c6280 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171234877.379:58271):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171234877.379:58272): avc:  denied  { read } for  pid=8905 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234877.379:58272): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234877.380:58273): avc:  denied  { search } for  pid=8905 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171234877.380:58273): avc:  denied  { write } for  pid=8905 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171234877.380:58273): avc:  denied  { add_name } for  pid=8905 comm="pyzor" name="e3jzKG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171234877.380:58273): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234877.381:58274): avc:  denied  { remove_name } for  pid=8905 comm="pyzor" name="e3jzKG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171234877.381:58274): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=8905 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171234882.719:58275): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234882.719:58275): arch=c000003e syscall=2 success=yes exit=9 a0=309fda0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171234916.086:58276): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234916.086:58276): arch=c000003e syscall=2 success=yes exit=12 a0=334c8f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171234916.086:58277): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234916.086:58277): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171234916.086:58277):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171234916.100:58278): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234916.100:58278): arch=c000003e syscall=2 success=yes exit=9 a0=31d9d10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171234921.634:58279): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234921.634:58279): arch=c000003e syscall=86 success=yes exit=0 a0=32a6da0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171234921.634:58280): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634231 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171234921.634:58280): arch=c000003e syscall=87 success=yes exit=0 a0=32a6da0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171235101.753:58281): user pid=8937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171235101.754:58282): login pid=8937 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171235101.757:58283): user pid=8937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171235101.757:58284): user pid=8937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171235401.097:58285): user pid=8973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171235401.097:58286): login pid=8973 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171235401.100:58287): user pid=8974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171235401.100:58288): login pid=8974 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171235401.101:58289): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171235401.101:58290): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171235401.112:58291): user pid=8974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171235401.112:58292): user pid=8974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171235401.120:58293): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171235401.121:58294): user pid=8973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171235574.839:58295): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171235574.840:58296): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171235585.087:58297): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171235585.088:58298): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171235585.097:58299): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171235585.104:58300): login pid=3672 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171235585.115:58301): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171235585.115:58302): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171235701.452:58303): user pid=9234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171235701.453:58304): login pid=9234 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171235701.457:58305): user pid=9234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171235701.457:58306): user pid=9234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171235724.057:58307): user pid=9279 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171235724.058:58308): user pid=9279 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171235969.873:58309): user pid=9339 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171235969.874:58310): user pid=9339 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171235969.885:58311): avc:  denied  { write } for  pid=9340 comm="imap" name="Sent" dev=dm-0 ino=12487190 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171235969.885:58311): arch=c000003e syscall=21 success=yes exit=0 a0=69e1b0 a1=6 a2=19 a3=6b0b98 items=0 ppid=3104 pid=9340 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171235985.379:58312): user pid=9347 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171235985.379:58313): user pid=9347 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171235985.391:58314): avc:  denied  { lock } for  pid=9348 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171235985.391:58314): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffe08dad30 a3=0 items=0 ppid=3104 pid=9348 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171235985.391:58314):  path="/home/dhighley/Mail/Trash"
>type=USER_ACCT msg=audit(1171236001.797:58315): user pid=9390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236001.798:58316): login pid=9390 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171236001.798:58317): user pid=9389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236001.798:58318): login pid=9389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171236001.804:58319): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236001.804:58320): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171236001.805:58321): user pid=9390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236001.805:58322): user pid=9390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171236001.827:58323): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171236001.828:58324): user pid=9389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171236010.099:58325): avc:  denied  { getattr } for  pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171236010.099:58325): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fffa000b660 a2=7fffa000b660 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171236010.099:58325):  path="/bin/hostname"
>type=AVC msg=audit(1171236010.099:58326): avc:  denied  { execute } for  pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171236010.099:58326): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171236010.099:58327): avc:  denied  { read } for  pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171236010.099:58327): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171236010.099:58328): avc:  denied  { execute_no_trans } for  pid=9402 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171236010.099:58328): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30527 pid=9402 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171236010.099:58328):  path="/bin/hostname"
>type=USER_ACCT msg=audit(1171236301.142:58329): user pid=9436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236301.143:58330): login pid=9436 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171236301.146:58331): user pid=9436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236301.146:58332): user pid=9436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171236601.495:58333): user pid=9473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236601.495:58334): login pid=9473 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171236601.498:58335): user pid=9474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236601.498:58336): login pid=9474 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171236601.499:58337): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236601.499:58338): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171236601.510:58339): user pid=9474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236601.510:58340): user pid=9474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171236601.518:58341): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171236601.518:58342): user pid=9473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171236901.835:58343): user pid=9517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171236901.835:58344): login pid=9517 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171236901.840:58345): user pid=9517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171236901.840:58346): user pid=9517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171237201.185:58347): user pid=9550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171237201.185:58348): login pid=9550 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171237201.187:58349): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171237201.187:58350): login pid=9551 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171237201.189:58351): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171237201.189:58352): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171237201.198:58353): user pid=9551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171237201.198:58354): user pid=9551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171237201.209:58355): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171237201.209:58356): user pid=9550 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171237501.539:58357): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171237501.539:58358): login pid=9587 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171237501.542:58359): user pid=9587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171237501.542:58360): user pid=9587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171237801.887:58361): user pid=9623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171237801.887:58362): login pid=9623 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171237801.889:58363): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171237801.889:58364): login pid=9624 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171237801.891:58365): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171237801.891:58366): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171237801.893:58367): user pid=9624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171237801.893:58368): user pid=9624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171237801.922:58369): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171237801.922:58370): user pid=9623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171238101.229:58371): user pid=9660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171238101.229:58372): login pid=9660 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171238101.233:58373): user pid=9660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171238101.234:58374): user pid=9660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171238401.553:58375): user pid=9698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171238401.553:58376): login pid=9698 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171238401.556:58377): user pid=9699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171238401.556:58378): login pid=9699 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171238401.559:58379): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171238401.559:58380): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171238401.561:58381): user pid=9699 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171238401.561:58382): user pid=9699 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171238401.580:58383): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171238401.580:58384): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171238461.896:58385): user pid=9714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171238461.896:58386): login pid=9714 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171238461.900:58387): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171238461.900:58388): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171238462.823:58389): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171238462.824:58390): user pid=9714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171238607.410:58391): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238607.410:58391): arch=c000003e syscall=2 success=yes exit=12 a0=32f2730 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238607.411:58392): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238607.411:58392): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238607.411:58392):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171238607.415:58393): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238607.415:58393): arch=c000003e syscall=2 success=yes exit=9 a0=30fdb40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238608.071:58394): avc:  denied  { search } for  pid=9748 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171238608.071:58394): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171238608.071:58395): avc:  denied  { getattr } for  pid=9748 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.071:58395): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9a4b7460 a2=7fff9a4b7460 a3=6c6280 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238608.071:58395):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171238608.071:58396): avc:  denied  { read } for  pid=9748 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.071:58396): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171238608.072:58397): avc:  denied  { search } for  pid=9748 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171238608.072:58397): avc:  denied  { write } for  pid=9748 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171238608.072:58397): avc:  denied  { add_name } for  pid=9748 comm="pyzor" name="p1gBmZ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171238608.072:58397): avc:  denied  { create } for  pid=9748 comm="pyzor" name="p1gBmZ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.072:58397): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171238608.072:58398): avc:  denied  { getattr } for  pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.072:58398): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9a4b5d60 a2=7fff9a4b5d60 a3=2 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238608.072:58398):  path="/tmp/p1gBmZ"
>type=AVC msg=audit(1171238608.072:58399): avc:  denied  { write } for  pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.072:58399): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238608.072:58399):  path="/tmp/p1gBmZ"
>type=AVC msg=audit(1171238608.073:58400): avc:  denied  { remove_name } for  pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171238608.073:58400): avc:  denied  { unlink } for  pid=9748 comm="pyzor" name="p1gBmZ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.073:58400): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171238608.073:58401): avc:  denied  { read } for  pid=9748 comm="pyzor" name="tmpdzxjQJ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238608.073:58401): arch=c000003e syscall=0 success=yes exit=116 a0=4 a1=6db010 a2=2000 a3=3 items=0 ppid=6550 pid=9748 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238608.073:58401):  path=2F746D702F746D70647A786A514A202864656C6574656429
>type=AVC msg=audit(1171238613.035:58402): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171238613.035:58402): arch=c000003e syscall=62 success=yes exit=0 a0=2614 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238613.162:58403): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.162:58403): arch=c000003e syscall=86 success=yes exit=0 a0=3039310 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238613.163:58404): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.163:58404): arch=c000003e syscall=87 success=yes exit=0 a0=3039310 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238613.164:58405): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.164:58405): arch=c000003e syscall=2 success=yes exit=9 a0=328f860 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171238613.177:58406): avc:  denied  { write } for  pid=9744 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171238613.177:58406): avc:  denied  { add_name } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171238613.177:58406): avc:  denied  { create } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.177:58406): arch=c000003e syscall=2 success=yes exit=6 a0=61b610 a1=c1 a2=124 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171238613.177:58407): avc:  denied  { write } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.177:58407): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238613.177:58407):  path="/home/dhighley/_QYC.V76zFB.douglas"
>type=AVC msg=audit(1171238613.178:58408): avc:  denied  { getattr } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.178:58408): arch=c000003e syscall=4 success=yes exit=0 a0=61b610 a1=7ffff465e060 a2=7ffff465e060 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171238613.178:58408):  path="/home/dhighley/_QYC.V76zFB.douglas"
>type=AVC msg=audit(1171238613.178:58409): avc:  denied  { link } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.178:58409): arch=c000003e syscall=86 success=yes exit=0 a0=61b610 a1=61c5d0 a2=7ffff465df80 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171238613.178:58410): avc:  denied  { remove_name } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171238613.178:58410): avc:  denied  { unlink } for  pid=9744 comm="procmail" name="_QYC.V76zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.178:58410): arch=c000003e syscall=87 success=yes exit=0 a0=61b610 a1=61c5d0 a2=7ffff465df80 a3=61b610 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171238613.178:58411): avc:  denied  { append } for  pid=9744 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171238613.178:58411): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9741 pid=9744 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171238701.831:58412): user pid=9759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171238701.832:58413): login pid=9759 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171238701.837:58414): user pid=9759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171238701.837:58415): user pid=9759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171239001.163:58416): user pid=9796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239001.163:58417): login pid=9796 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171239001.166:58418): user pid=9797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239001.166:58419): login pid=9797 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171239001.166:58420): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239001.166:58421): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171239001.176:58422): user pid=9797 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239001.176:58423): user pid=9797 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171239001.185:58424): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171239001.185:58425): user pid=9796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171239301.520:58426): user pid=9834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239301.521:58427): login pid=9834 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171239301.525:58428): user pid=9834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239301.525:58429): user pid=9834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171239532.593:58430): avc:  denied  { search } for  pid=9869 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171239532.593:58430): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171239532.594:58431): avc:  denied  { create } for  pid=9869 comm="pyzor" name="9Y8shj" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239532.594:58431): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171239532.594:58432): avc:  denied  { getattr } for  pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239532.594:58432): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff7245fd10 a2=7fff7245fd10 a3=2 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171239532.594:58432):  path="/tmp/9Y8shj"
>type=AVC msg=audit(1171239532.594:58433): avc:  denied  { write } for  pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239532.594:58433): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171239532.594:58433):  path="/tmp/9Y8shj"
>type=AVC msg=audit(1171239532.595:58434): avc:  denied  { unlink } for  pid=9869 comm="pyzor" name="9Y8shj" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239532.595:58434): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171239532.596:58435): avc:  denied  { read } for  pid=9869 comm="pyzor" name="tmpcmoiaF" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239532.596:58435): arch=c000003e syscall=0 success=yes exit=2407 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=6550 pid=9869 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171239532.596:58435):  path=2F746D702F746D70636D6F696146202864656C6574656429
>type=AVC msg=audit(1171239534.980:58436): avc:  denied  { append } for  pid=9865 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171239534.980:58436): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9862 pid=9865 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171239601.875:58437): user pid=9876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239601.875:58438): login pid=9876 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171239601.876:58439): user pid=9877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239601.877:58440): login pid=9877 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171239601.879:58441): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239601.879:58442): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171239601.889:58443): user pid=9877 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239601.889:58444): user pid=9877 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171239601.906:58445): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171239601.906:58446): user pid=9876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171239901.242:58447): user pid=9911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171239901.243:58448): login pid=9911 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171239901.246:58449): user pid=9911 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171239901.246:58450): user pid=9911 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171240201.571:58451): user pid=9946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171240201.571:58452): login pid=9946 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171240201.573:58453): user pid=9947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171240201.573:58454): login pid=9947 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171240201.575:58455): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171240201.575:58456): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171240201.585:58457): user pid=9947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171240201.585:58458): user pid=9947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171240201.597:58459): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171240201.597:58460): user pid=9946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171240501.923:58461): user pid=9983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171240501.923:58462): login pid=9983 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171240501.927:58463): user pid=9983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171240501.927:58464): user pid=9983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171240801.255:58465): user pid=10017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171240801.256:58466): login pid=10017 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171240801.258:58467): user pid=10018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171240801.258:58468): login pid=10018 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171240801.260:58469): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171240801.260:58470): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171240801.269:58471): user pid=10018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171240801.269:58472): user pid=10018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171240801.280:58473): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171240801.281:58474): user pid=10017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171241101.603:58475): user pid=10080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171241101.603:58476): login pid=10080 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171241101.607:58477): user pid=10080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171241101.607:58478): user pid=10080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171241401.932:58479): user pid=10116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171241401.933:58480): login pid=10116 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171241401.934:58481): user pid=10115 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171241401.934:58482): login pid=10115 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171241401.937:58483): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171241401.937:58484): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171241401.940:58485): user pid=10116 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171241401.940:58486): user pid=10116 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171241401.960:58487): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171241401.960:58488): user pid=10115 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171241507.633:58489): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241507.633:58489): arch=c000003e syscall=2 success=yes exit=12 a0=325dbc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171241507.633:58490): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241507.633:58490): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171241507.633:58490):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171241507.644:58491): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241507.644:58491): arch=c000003e syscall=2 success=yes exit=9 a0=3073c60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171241508.152:58492): avc:  denied  { getattr } for  pid=10147 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241508.152:58492): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe93c4370 a2=7fffe93c4370 a3=6c6280 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171241508.152:58492):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171241508.152:58493): avc:  denied  { read } for  pid=10147 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241508.152:58493): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171241508.153:58494): avc:  denied  { search } for  pid=10147 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171241508.153:58494): avc:  denied  { write } for  pid=10147 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171241508.153:58494): avc:  denied  { add_name } for  pid=10147 comm="pyzor" name="acg5AT" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171241508.153:58494): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171241508.153:58495): avc:  denied  { remove_name } for  pid=10147 comm="pyzor" name="acg5AT" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171241508.153:58495): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=10147 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171241513.115:58496): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171241513.115:58496): arch=c000003e syscall=62 success=yes exit=0 a0=27a3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171241513.224:58497): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241513.224:58497): arch=c000003e syscall=86 success=yes exit=0 a0=3049680 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171241513.224:58498): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241513.224:58498): arch=c000003e syscall=87 success=yes exit=0 a0=3049680 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171241513.225:58499): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171241513.225:58499): arch=c000003e syscall=2 success=yes exit=9 a0=31d74b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171241701.280:58500): user pid=10164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171241701.280:58501): login pid=10164 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171241701.285:58502): user pid=10164 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171241701.285:58503): user pid=10164 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171242001.612:58504): user pid=10204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242001.612:58505): login pid=10204 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171242001.614:58506): user pid=10205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242001.614:58507): login pid=10205 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171242001.616:58508): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242001.616:58509): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171242001.627:58510): user pid=10205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242001.627:58511): user pid=10205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171242001.635:58512): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171242001.635:58513): user pid=10204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171242061.953:58514): user pid=10219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242061.953:58515): login pid=10219 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171242061.957:58516): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242061.957:58517): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171242062.875:58518): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171242062.876:58519): user pid=10219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171242301.882:58520): user pid=10255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242301.882:58521): login pid=10255 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171242301.885:58522): user pid=10255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242301.885:58523): user pid=10255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171242311.347:58524): avc:  denied  { search } for  pid=10273 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171242311.347:58524): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171242311.348:58525): avc:  denied  { search } for  pid=10273 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171242311.348:58525): avc:  denied  { write } for  pid=10273 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171242311.348:58525): avc:  denied  { add_name } for  pid=10273 comm="pyzor" name="_3mr8E" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171242311.348:58525): avc:  denied  { create } for  pid=10273 comm="pyzor" name="_3mr8E" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242311.348:58525): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171242311.348:58526): avc:  denied  { getattr } for  pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242311.348:58526): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c5a2e50 a2=7fff6c5a2e50 a3=2 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171242311.348:58526):  path="/tmp/_3mr8E"
>type=AVC msg=audit(1171242311.348:58527): avc:  denied  { write } for  pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242311.348:58527): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171242311.348:58527):  path="/tmp/_3mr8E"
>type=AVC msg=audit(1171242311.348:58528): avc:  denied  { remove_name } for  pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171242311.348:58528): avc:  denied  { unlink } for  pid=10273 comm="pyzor" name="_3mr8E" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242311.348:58528): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171242311.355:58529): avc:  denied  { read } for  pid=10273 comm="pyzor" name="tmptvo4_L" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242311.355:58529): arch=c000003e syscall=0 success=yes exit=2096 a0=4 a1=2aaaaf34d000 a2=1000 a3=1d9 items=0 ppid=6550 pid=10273 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171242311.355:58529):  path=2F746D702F746D7074766F345F4C202864656C6574656429
>type=USER_ACCT msg=audit(1171242601.223:58530): user pid=10298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242601.224:58531): login pid=10298 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171242601.227:58532): user pid=10299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242601.227:58533): login pid=10299 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171242601.230:58534): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242601.230:58535): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171242601.233:58536): user pid=10299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242601.233:58537): user pid=10299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171242601.252:58538): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171242601.252:58539): user pid=10298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171242787.586:58540): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171242787.586:58541): user pid=8861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171242901.592:58542): user pid=10334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171242901.592:58543): login pid=10334 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171242901.596:58544): user pid=10334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171242901.596:58545): user pid=10334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171242931.508:58546): avc:  denied  { write } for  pid=10349 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171242931.508:58546): avc:  denied  { add_name } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171242931.508:58546): avc:  denied  { create } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242931.508:58546): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171242931.509:58547): avc:  denied  { write } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242931.509:58547): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171242931.509:58547):  path="/home/dhighley/_thC.z-7zFB.douglas"
>type=AVC msg=audit(1171242931.509:58548): avc:  denied  { getattr } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242931.509:58548): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffa93ebde0 a2=7fffa93ebde0 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171242931.509:58548):  path="/home/dhighley/_thC.z-7zFB.douglas"
>type=AVC msg=audit(1171242931.509:58549): avc:  denied  { link } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242931.509:58549): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61db30 a2=7fffa93ebd00 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171242931.509:58550): avc:  denied  { remove_name } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171242931.509:58550): avc:  denied  { unlink } for  pid=10349 comm="procmail" name="_thC.z-7zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171242931.509:58550): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61db30 a2=7fffa93ebd00 a3=61b650 items=0 ppid=10346 pid=10349 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171243201.922:58551): user pid=10375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171243201.922:58552): login pid=10375 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171243201.924:58553): user pid=10376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171243201.924:58554): login pid=10376 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171243201.925:58555): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171243201.925:58556): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171243201.934:58557): user pid=10376 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171243201.934:58558): user pid=10376 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171243201.944:58559): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171243201.944:58560): user pid=10375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171243501.257:58561): user pid=10411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171243501.257:58562): login pid=10411 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171243501.261:58563): user pid=10411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171243501.261:58564): user pid=10411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171243660.981:58565): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243660.981:58565): arch=c000003e syscall=2 success=yes exit=12 a0=32204d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171243660.981:58566): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243660.981:58566): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171243660.981:58566):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171243660.987:58567): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243660.987:58567): arch=c000003e syscall=2 success=yes exit=9 a0=308f7e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171243661.529:58568): avc:  denied  { getattr } for  pid=10440 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243661.529:58568): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff97593540 a2=7fff97593540 a3=6c6280 items=0 ppid=6550 pid=10440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171243661.529:58568):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171243661.529:58569): avc:  denied  { read } for  pid=10440 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243661.529:58569): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=10440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171243661.749:58570): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243661.749:58570): arch=c000003e syscall=86 success=yes exit=0 a0=306e080 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171243661.749:58571): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243661.749:58571): arch=c000003e syscall=87 success=yes exit=0 a0=306e080 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171243661.750:58572): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171243661.750:58572): arch=c000003e syscall=2 success=yes exit=9 a0=3061a70 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171243801.591:58573): user pid=10454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171243801.591:58574): login pid=10454 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171243801.592:58575): user pid=10455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171243801.592:58576): login pid=10455 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171243801.597:58577): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171243801.597:58578): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171243801.598:58579): user pid=10455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171243801.598:58580): user pid=10455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171243801.618:58581): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171243801.619:58582): user pid=10454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171244101.944:58583): user pid=10489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171244101.944:58584): login pid=10489 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171244101.948:58585): user pid=10489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171244101.948:58586): user pid=10489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171244401.276:58587): user pid=10524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171244401.277:58588): login pid=10524 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171244401.277:58589): user pid=10523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171244401.277:58590): login pid=10523 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171244401.282:58591): user pid=10524 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171244401.282:58592): user pid=10524 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171244401.286:58593): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171244401.286:58594): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171244401.310:58595): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171244401.310:58596): user pid=10523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171244522.464:58597): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244522.464:58597): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171244522.465:58598): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244522.465:58598): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171244530.115:58599): avc:  denied  { create } for  pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244530.115:58599): arch=c000003e syscall=2 success=yes exit=6 a0=61fd10 a1=c1 a2=124 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171244530.116:58600): avc:  denied  { write } for  pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244530.116:58600): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171244530.116:58600):  path="/home/dhighley/_0kC.yX8zFB.douglas"
>type=AVC msg=audit(1171244530.116:58601): avc:  denied  { getattr } for  pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244530.116:58601): arch=c000003e syscall=4 success=yes exit=0 a0=61fd10 a1=7fff22c8a680 a2=7fff22c8a680 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171244530.116:58601):  path="/home/dhighley/_0kC.yX8zFB.douglas"
>type=AVC msg=audit(1171244530.116:58602): avc:  denied  { link } for  pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244530.116:58602): arch=c000003e syscall=86 success=yes exit=0 a0=61fd10 a1=61b510 a2=7fff22c8a5a0 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171244530.117:58603): avc:  denied  { unlink } for  pid=10548 comm="procmail" name="_0kC.yX8zFB.douglas" dev=dm-0 ino=12487161 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171244530.117:58603): arch=c000003e syscall=87 success=yes exit=0 a0=61fd10 a1=61b510 a2=7fff22c8a5a0 a3=61fd10 items=0 ppid=10545 pid=10548 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171244701.619:58604): user pid=10568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171244701.619:58605): login pid=10568 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171244701.622:58606): user pid=10568 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171244701.622:58607): user pid=10568 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171245001.945:58608): user pid=10600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245001.945:58609): login pid=10600 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171245001.946:58610): user pid=10601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245001.946:58611): login pid=10601 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171245001.950:58612): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245001.950:58613): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171245001.951:58614): user pid=10601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245001.951:58615): user pid=10601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171245001.974:58616): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171245001.974:58617): user pid=10600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171245301.297:58618): user pid=10636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245301.297:58619): login pid=10636 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171245301.301:58620): user pid=10636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245301.301:58621): user pid=10636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171245601.622:58622): user pid=10672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245601.623:58623): login pid=10672 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171245601.623:58624): user pid=10673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245601.623:58625): login pid=10673 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171245601.625:58626): user pid=10674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245601.626:58627): login pid=10674 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171245601.628:58628): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245601.628:58629): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171245601.631:58630): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245601.631:58631): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171245601.638:58632): user pid=10674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245601.638:58633): user pid=10674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171245601.666:58634): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171245601.666:58635): user pid=10672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171245661.959:58636): user pid=10693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245661.959:58637): login pid=10693 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171245661.964:58638): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245661.964:58639): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171245662.855:58640): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171245662.855:58641): user pid=10693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171245901.863:58642): user pid=10730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171245901.864:58643): login pid=10730 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171245901.868:58644): user pid=10730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171245901.868:58645): user pid=10730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171246201.198:58646): user pid=10770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171246201.198:58647): login pid=10770 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171246201.200:58648): user pid=10771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171246201.200:58649): login pid=10771 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171246201.201:58650): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171246201.201:58651): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171246201.212:58652): user pid=10771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171246201.213:58653): user pid=10771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171246201.219:58654): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171246201.220:58655): user pid=10770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171246501.538:58656): user pid=10807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171246501.538:58657): login pid=10807 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171246501.541:58658): user pid=10807 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171246501.541:58659): user pid=10807 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171246801.861:58660): user pid=10840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171246801.861:58661): login pid=10840 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171246801.862:58662): user pid=10841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171246801.862:58663): login pid=10841 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171246801.867:58664): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171246801.867:58665): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171246801.872:58666): user pid=10841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171246801.872:58667): user pid=10841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171246801.887:58668): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171246801.887:58669): user pid=10840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171247101.216:58670): user pid=10876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171247101.216:58671): login pid=10876 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171247101.220:58672): user pid=10876 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171247101.220:58673): user pid=10876 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171247401.541:58674): user pid=10909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171247401.541:58675): login pid=10909 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171247401.543:58676): user pid=10910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171247401.543:58677): login pid=10910 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171247401.545:58678): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171247401.545:58679): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171247401.557:58680): user pid=10910 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171247401.557:58681): user pid=10910 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171247401.563:58682): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171247401.563:58683): user pid=10909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171247701.887:58684): user pid=10946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171247701.888:58685): login pid=10946 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171247701.891:58686): user pid=10946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171247701.891:58687): user pid=10946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171248001.219:58688): user pid=10982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248001.219:58689): login pid=10982 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171248001.221:58690): user pid=10983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248001.222:58691): login pid=10983 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171248001.222:58692): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248001.222:58693): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171248001.232:58694): user pid=10983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248001.232:58695): user pid=10983 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171248001.241:58696): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171248001.241:58697): user pid=10982 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171248301.566:58698): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248301.567:58699): login pid=11018 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171248301.570:58700): user pid=11018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248301.570:58701): user pid=11018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171248601.891:58702): user pid=11052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248601.891:58703): login pid=11052 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171248601.893:58704): user pid=11053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248601.894:58705): login pid=11053 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171248601.894:58706): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248601.894:58707): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171248601.905:58708): user pid=11053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248601.906:58709): user pid=11053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171248601.914:58710): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171248601.915:58711): user pid=11052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171248901.230:58712): user pid=11090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171248901.231:58713): login pid=11090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171248901.234:58714): user pid=11090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171248901.235:58715): user pid=11090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171249201.564:58716): user pid=11124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249201.564:58717): login pid=11124 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171249201.565:58718): user pid=11125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249201.565:58719): login pid=11125 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171249201.570:58720): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249201.570:58721): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171249201.576:58722): user pid=11125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249201.576:58723): user pid=11125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171249201.590:58724): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171249201.590:58725): user pid=11124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171249261.903:58726): user pid=11140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249261.903:58727): login pid=11140 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171249261.907:58728): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249261.907:58729): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171249262.792:58730): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171249262.792:58731): user pid=11140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171249501.801:58732): user pid=11176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249501.801:58733): login pid=11176 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171249501.806:58734): user pid=11176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249501.806:58735): user pid=11176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171249801.124:58736): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249801.125:58737): login pid=11211 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171249801.127:58738): user pid=11212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171249801.127:58739): login pid=11212 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171249801.131:58740): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249801.131:58741): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171249801.133:58742): user pid=11212 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171249801.133:58743): user pid=11212 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171249801.160:58744): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171249801.160:58745): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171250101.459:58746): user pid=11248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171250101.459:58747): login pid=11248 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171250101.462:58748): user pid=11248 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171250101.462:58749): user pid=11248 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171250401.783:58750): user pid=11281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171250401.783:58751): login pid=11281 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171250401.786:58752): user pid=11282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171250401.786:58753): login pid=11282 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171250401.789:58754): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171250401.789:58755): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171250401.791:58756): user pid=11282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171250401.791:58757): user pid=11282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171250401.818:58758): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171250401.818:58759): user pid=11281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171250701.124:58760): user pid=11320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171250701.124:58761): login pid=11320 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171250701.128:58762): user pid=11320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171250701.128:58763): user pid=11320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171251001.448:58764): user pid=11356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251001.449:58765): login pid=11356 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171251001.451:58766): user pid=11357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251001.451:58767): login pid=11357 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171251001.453:58768): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251001.453:58769): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171251001.463:58770): user pid=11357 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251001.463:58771): user pid=11357 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171251001.472:58772): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171251001.472:58773): user pid=11356 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171251301.783:58774): user pid=11391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251301.783:58775): login pid=11391 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171251301.787:58776): user pid=11391 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251301.787:58777): user pid=11391 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171251601.109:58778): user pid=11444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251601.109:58779): login pid=11444 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171251601.109:58780): user pid=11445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251601.110:58781): login pid=11445 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171251601.114:58782): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251601.114:58783): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171251601.115:58784): user pid=11445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251601.115:58785): user pid=11445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171251601.144:58786): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171251601.145:58787): user pid=11444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171251756.825:58788): avc:  denied  { search } for  pid=11507 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171251756.825:58788): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171251756.826:58789): avc:  denied  { search } for  pid=11507 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171251756.826:58789): avc:  denied  { write } for  pid=11507 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171251756.826:58789): avc:  denied  { add_name } for  pid=11507 comm="pyzor" name="zMAy9h" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171251756.826:58789): avc:  denied  { create } for  pid=11507 comm="pyzor" name="zMAy9h" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171251756.826:58789): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171251756.827:58790): avc:  denied  { getattr } for  pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171251756.827:58790): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffacda7bc0 a2=7fffacda7bc0 a3=3 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171251756.827:58790):  path="/tmp/zMAy9h"
>type=AVC msg=audit(1171251756.827:58791): avc:  denied  { write } for  pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171251756.827:58791): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171251756.827:58791):  path="/tmp/zMAy9h"
>type=AVC msg=audit(1171251756.827:58792): avc:  denied  { remove_name } for  pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171251756.827:58792): avc:  denied  { unlink } for  pid=11507 comm="pyzor" name="zMAy9h" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171251756.827:58792): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171251756.828:58793): avc:  denied  { read } for  pid=11507 comm="pyzor" name="tmptWKqPJ" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171251756.828:58793): arch=c000003e syscall=0 success=yes exit=2887 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=11507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171251756.828:58793):  path=2F746D702F746D7074574B71504A202864656C6574656429
>type=AVC msg=audit(1171251761.787:58794): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171251761.787:58794): arch=c000003e syscall=62 success=yes exit=0 a0=2cf3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171251761.821:58795): avc:  denied  { write } for  pid=11501 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171251761.821:58795): avc:  denied  { add_name } for  pid=11501 comm="procmail" name="_tzC.xI-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171251761.821:58795): arch=c000003e syscall=2 success=yes exit=6 a0=61f2e0 a1=c1 a2=124 a3=61f2e0 items=0 ppid=11498 pid=11501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171251761.821:58796): avc:  denied  { remove_name } for  pid=11501 comm="procmail" name="_tzC.xI-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171251761.821:58796): arch=c000003e syscall=87 success=yes exit=0 a0=61f2e0 a1=61f2c0 a2=7fff8f5c9ef0 a3=61f2e0 items=0 ppid=11498 pid=11501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171251901.443:58797): user pid=11562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171251901.444:58798): login pid=11562 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171251901.447:58799): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171251901.447:58800): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171252166.699:58801): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252166.699:58801): arch=c000003e syscall=2 success=yes exit=12 a0=2fbef10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171252166.699:58802): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252166.699:58802): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252166.699:58802):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171252166.713:58803): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252166.713:58803): arch=c000003e syscall=2 success=yes exit=9 a0=32a6a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171252167.302:58804): avc:  denied  { getattr } for  pid=11601 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252167.302:58804): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2b7a6750 a2=7fff2b7a6750 a3=6c6280 items=0 ppid=6550 pid=11601 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252167.302:58804):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171252167.303:58805): avc:  denied  { read } for  pid=11601 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252167.303:58805): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=11601 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171252172.281:58806): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634228 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.281:58806): arch=c000003e syscall=86 success=yes exit=0 a0=2fbb280 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171252172.281:58807): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634228 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.281:58807): arch=c000003e syscall=87 success=yes exit=0 a0=2fbb280 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171252172.282:58808): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.282:58808): arch=c000003e syscall=2 success=yes exit=9 a0=30cd220 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171252172.296:58809): avc:  denied  { create } for  pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.296:58809): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171252172.299:58810): avc:  denied  { write } for  pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.299:58810): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252172.299:58810):  path="/home/dhighley/_N1C.MP-zFB.douglas"
>type=AVC msg=audit(1171252172.299:58811): avc:  denied  { getattr } for  pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.299:58811): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff2860ec40 a2=7fff2860ec40 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252172.299:58811):  path="/home/dhighley/_N1C.MP-zFB.douglas"
>type=AVC msg=audit(1171252172.299:58812): avc:  denied  { link } for  pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.299:58812): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f070 a2=7fff2860eb60 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171252172.299:58813): avc:  denied  { unlink } for  pid=11597 comm="procmail" name="_N1C.MP-zFB.douglas" dev=dm-0 ino=12487644 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252172.299:58813): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f070 a2=7fff2860eb60 a3=61b650 items=0 ppid=11594 pid=11597 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171252201.779:58814): user pid=11607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171252201.779:58815): login pid=11607 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171252201.781:58816): user pid=11608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171252201.781:58817): login pid=11608 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171252201.783:58818): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252201.783:58819): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171252201.794:58820): user pid=11608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252201.794:58821): user pid=11608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171252201.805:58822): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171252201.805:58823): user pid=11607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171252286.412:58824): avc:  denied  { getattr } for  pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252286.412:58824): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff4c73bd90 a2=7fff4c73bd90 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252286.412:58824):  path="/bin/hostname"
>type=AVC msg=audit(1171252286.412:58825): avc:  denied  { execute } for  pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252286.412:58825): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171252286.413:58826): avc:  denied  { read } for  pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252286.413:58826): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171252286.413:58827): avc:  denied  { execute_no_trans } for  pid=11629 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171252286.413:58827): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30534 pid=11629 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171252286.413:58827):  path="/bin/hostname"
>type=USER_ACCT msg=audit(1171252501.126:58828): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171252501.126:58829): login pid=11656 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171252501.130:58830): user pid=11656 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252501.130:58831): user pid=11656 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171252801.466:58832): user pid=11963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171252801.467:58833): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171252801.467:58834): login pid=11962 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171252801.467:58835): login pid=11963 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171252801.473:58836): user pid=11963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252801.473:58837): user pid=11963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171252801.477:58838): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252801.477:58839): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171252801.506:58840): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171252801.507:58841): user pid=11962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171252861.832:58842): user pid=11998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171252861.832:58843): login pid=11998 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171252861.837:58844): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171252861.837:58845): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171252862.779:58846): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171252862.780:58847): user pid=11998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171253101.787:58848): user pid=12038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171253101.788:58849): login pid=12038 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171253101.792:58850): user pid=12038 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171253101.792:58851): user pid=12038 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171253312.285:58852): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.285:58852): arch=c000003e syscall=2 success=yes exit=12 a0=322e540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253312.285:58853): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.285:58853): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253312.285:58853):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171253312.296:58854): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.296:58854): arch=c000003e syscall=2 success=yes exit=9 a0=31d2ff0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253312.822:58855): avc:  denied  { search } for  pid=12090 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171253312.822:58855): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171253312.822:58856): avc:  denied  { getattr } for  pid=12090 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.822:58856): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffac67d620 a2=7fffac67d620 a3=6c6280 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253312.822:58856):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171253312.822:58857): avc:  denied  { read } for  pid=12090 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.822:58857): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171253312.823:58858): avc:  denied  { search } for  pid=12090 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171253312.823:58858): avc:  denied  { write } for  pid=12090 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171253312.823:58858): avc:  denied  { add_name } for  pid=12090 comm="pyzor" name="J6BrMb" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171253312.823:58858): avc:  denied  { create } for  pid=12090 comm="pyzor" name="J6BrMb" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.823:58858): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171253312.823:58859): avc:  denied  { getattr } for  pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.823:58859): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffac67bb10 a2=7fffac67bb10 a3=3 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253312.823:58859):  path="/tmp/J6BrMb"
>type=AVC msg=audit(1171253312.823:58860): avc:  denied  { write } for  pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.823:58860): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253312.823:58860):  path="/tmp/J6BrMb"
>type=AVC msg=audit(1171253312.823:58861): avc:  denied  { remove_name } for  pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171253312.823:58861): avc:  denied  { unlink } for  pid=12090 comm="pyzor" name="J6BrMb" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.823:58861): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171253312.824:58862): avc:  denied  { read } for  pid=12090 comm="pyzor" name="tmpKznqdt" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253312.824:58862): arch=c000003e syscall=0 success=yes exit=2577 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=6550 pid=12090 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253312.824:58862):  path=2F746D702F746D704B7A6E716474202864656C6574656429
>type=AVC msg=audit(1171253317.784:58863): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171253317.784:58863): arch=c000003e syscall=62 success=yes exit=0 a0=2f3a a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253319.799:58864): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.799:58864): arch=c000003e syscall=86 success=yes exit=0 a0=303f320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253319.799:58865): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634215 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.799:58865): arch=c000003e syscall=87 success=yes exit=0 a0=303f320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253319.800:58866): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.800:58866): arch=c000003e syscall=2 success=yes exit=9 a0=331bff0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171253319.810:58867): avc:  denied  { write } for  pid=12085 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171253319.810:58867): avc:  denied  { add_name } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171253319.810:58867): avc:  denied  { create } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.810:58867): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171253319.811:58868): avc:  denied  { write } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.811:58868): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253319.811:58868):  path="/home/dhighley/_18C.Hh-zFB.douglas"
>type=AVC msg=audit(1171253319.819:58869): avc:  denied  { getattr } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.819:58869): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff32df57e0 a2=7fff32df57e0 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171253319.819:58869):  path="/home/dhighley/_18C.Hh-zFB.douglas"
>type=AVC msg=audit(1171253319.819:58870): avc:  denied  { link } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.819:58870): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f150 a2=7fff32df5700 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171253319.820:58871): avc:  denied  { remove_name } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171253319.820:58871): avc:  denied  { unlink } for  pid=12085 comm="procmail" name="_18C.Hh-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.820:58871): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f150 a2=7fff32df5700 a3=61b650 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171253319.820:58872): avc:  denied  { append } for  pid=12085 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171253319.820:58872): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12082 pid=12085 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171253401.116:58873): user pid=12103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171253401.116:58874): login pid=12103 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171253401.118:58875): user pid=12104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171253401.118:58876): login pid=12104 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171253401.120:58877): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171253401.120:58878): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171253401.124:58879): user pid=12104 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171253401.124:58880): user pid=12104 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171253401.146:58881): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171253401.146:58882): user pid=12103 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171253587.941:58883): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171253587.942:58884): user pid=10673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171253701.948:58885): user pid=12273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171253701.949:58886): login pid=12273 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171253701.952:58887): user pid=12273 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171253701.952:58888): user pid=12273 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171254001.316:58889): user pid=12310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254001.317:58890): login pid=12310 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171254001.318:58891): user pid=12311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254001.319:58892): login pid=12311 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171254001.323:58893): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254001.323:58894): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171254001.326:58895): user pid=12311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254001.326:58896): user pid=12311 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171254001.351:58897): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171254001.351:58898): user pid=12310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171254301.685:58899): user pid=12347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254301.686:58900): login pid=12347 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171254301.689:58901): user pid=12347 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254301.689:58902): user pid=12347 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171254601.064:58903): user pid=12382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254601.064:58904): login pid=12382 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171254601.067:58905): user pid=12383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254601.067:58906): login pid=12383 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171254601.070:58907): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254601.070:58908): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171254601.072:58909): user pid=12383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254601.072:58910): user pid=12383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171254601.095:58911): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171254601.095:58912): user pid=12382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171254653.818:58913): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254653.818:58913): arch=c000003e syscall=2 success=yes exit=12 a0=30cdfd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254653.818:58914): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254653.818:58914): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254653.818:58914):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171254653.826:58915): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254653.826:58915): arch=c000003e syscall=2 success=yes exit=9 a0=9fd990 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254654.305:58916): avc:  denied  { getattr } for  pid=12406 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254654.305:58916): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff1da6d50 a2=7ffff1da6d50 a3=6c6280 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254654.305:58916):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171254654.305:58917): avc:  denied  { read } for  pid=12406 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254654.305:58917): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254654.306:58918): avc:  denied  { search } for  pid=12406 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171254654.306:58918): avc:  denied  { write } for  pid=12406 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171254654.306:58918): avc:  denied  { add_name } for  pid=12406 comm="pyzor" name="42AbGU" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171254654.306:58918): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254654.307:58919): avc:  denied  { remove_name } for  pid=12406 comm="pyzor" name="42AbGU" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171254654.307:58919): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12406 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254659.271:58920): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171254659.271:58920): arch=c000003e syscall=62 success=yes exit=0 a0=3076 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254659.389:58921): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.389:58921): arch=c000003e syscall=86 success=yes exit=0 a0=2da8dd0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254659.389:58922): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.389:58922): arch=c000003e syscall=87 success=yes exit=0 a0=2da8dd0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254659.390:58923): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.390:58923): arch=c000003e syscall=2 success=yes exit=9 a0=335ae50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171254659.443:58924): avc:  denied  { write } for  pid=12402 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171254659.443:58924): avc:  denied  { add_name } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171254659.443:58924): avc:  denied  { create } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.443:58924): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171254659.443:58925): avc:  denied  { write } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.443:58925): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254659.443:58925):  path="/home/dhighley/_yBD.D2-zFB.douglas"
>type=AVC msg=audit(1171254659.444:58926): avc:  denied  { getattr } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.444:58926): arch=c000003e syscall=4 success=yes exit=0 a0=61c980 a1=7fff3d0c2ac0 a2=7fff3d0c2ac0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254659.444:58926):  path="/home/dhighley/_yBD.D2-zFB.douglas"
>type=AVC msg=audit(1171254659.444:58927): avc:  denied  { link } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.444:58927): arch=c000003e syscall=86 success=yes exit=0 a0=61c980 a1=61b510 a2=7fff3d0c29e0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171254659.444:58928): avc:  denied  { remove_name } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171254659.444:58928): avc:  denied  { unlink } for  pid=12402 comm="procmail" name="_yBD.D2-zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254659.444:58928): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b510 a2=7fff3d0c29e0 a3=61c980 items=0 ppid=12399 pid=12402 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171254734.098:58929): avc:  denied  { search } for  pid=12420 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171254734.098:58929): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254734.099:58930): avc:  denied  { create } for  pid=12420 comm="pyzor" name="um7pmL" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.099:58930): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254734.099:58931): avc:  denied  { getattr } for  pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.099:58931): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6f283720 a2=7fff6f283720 a3=3 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254734.099:58931):  path="/tmp/um7pmL"
>type=AVC msg=audit(1171254734.100:58932): avc:  denied  { write } for  pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.100:58932): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254734.100:58932):  path="/tmp/um7pmL"
>type=AVC msg=audit(1171254734.100:58933): avc:  denied  { unlink } for  pid=12420 comm="pyzor" name="um7pmL" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.100:58933): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171254734.101:58934): avc:  denied  { read } for  pid=12420 comm="pyzor" name="tmpx85F5P" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.101:58934): arch=c000003e syscall=0 success=yes exit=709 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=12420 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171254734.101:58934):  path=2F746D702F746D70783835463550202864656C6574656429
>type=AVC msg=audit(1171254734.901:58935): avc:  denied  { append } for  pid=12416 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171254734.901:58935): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12413 pid=12416 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171254901.435:58936): user pid=12436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171254901.436:58937): login pid=12436 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171254901.440:58938): user pid=12436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171254901.440:58939): user pid=12436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171255141.680:58940): avc:  denied  { search } for  pid=12473 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171255141.680:58940): avc:  denied  { write } for  pid=12473 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171255141.680:58940): avc:  denied  { add_name } for  pid=12473 comm="pyzor" name="9QB28X" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171255141.680:58940): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=12473 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171255141.681:58941): avc:  denied  { remove_name } for  pid=12473 comm="pyzor" name="9QB28X" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171255141.681:58941): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12473 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171255201.787:58942): user pid=12479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171255201.788:58943): login pid=12479 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171255201.788:58944): user pid=12480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171255201.789:58945): login pid=12480 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171255201.790:58946): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171255201.790:58947): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171255201.801:58948): user pid=12480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171255201.801:58949): user pid=12480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171255201.813:58950): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171255201.813:58951): user pid=12479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171255501.152:58952): user pid=12516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171255501.152:58953): login pid=12516 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171255501.155:58954): user pid=12516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171255501.155:58955): user pid=12516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171255801.502:58956): user pid=12552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171255801.502:58957): login pid=12552 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171255801.503:58958): user pid=12551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171255801.504:58959): login pid=12551 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171255801.508:58960): user pid=12552 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171255801.508:58961): user pid=12552 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171255801.511:58962): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171255801.511:58963): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171255801.532:58964): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171255801.532:58965): user pid=12551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171256101.882:58966): user pid=12586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256101.883:58967): login pid=12586 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171256101.887:58968): user pid=12586 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256101.887:58969): user pid=12586 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171256136.063:58970): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171256136.063:58970): arch=c000003e syscall=62 success=yes exit=0 a0=313d a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171256401.254:58971): user pid=12629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256401.254:58972): login pid=12629 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171256401.256:58973): user pid=12630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256401.256:58974): login pid=12630 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171256401.257:58975): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256401.257:58976): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171256401.259:58977): user pid=12631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256401.259:58978): login pid=12631 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171256401.268:58979): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256401.268:58980): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171256401.276:58981): user pid=12631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256401.276:58982): user pid=12631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171256401.288:58983): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171256401.288:58984): user pid=12629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171256461.634:58985): user pid=12650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256461.634:58986): login pid=12650 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171256461.638:58987): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256461.638:58988): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171256462.607:58989): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171256462.607:58990): user pid=12650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171256701.616:58991): user pid=12686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171256701.617:58992): login pid=12686 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171256701.621:58993): user pid=12686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171256701.621:58994): user pid=12686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171257001.988:58995): user pid=12722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257001.988:58996): login pid=12722 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171257001.990:58997): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257001.990:58998): login pid=12723 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171257001.991:58999): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257001.991:59000): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171257002.003:59001): user pid=12723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257002.003:59002): user pid=12723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171257002.013:59003): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171257002.013:59004): user pid=12722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171257119.917:59005): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257119.917:59005): arch=c000003e syscall=2 success=yes exit=12 a0=31c8640 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257119.918:59006): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257119.918:59006): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257119.918:59006):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171257119.926:59007): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257119.926:59007): arch=c000003e syscall=2 success=yes exit=9 a0=3125780 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257120.519:59008): avc:  denied  { getattr } for  pid=12751 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257120.519:59008): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5128f230 a2=7fff5128f230 a3=6c6280 items=0 ppid=6550 pid=12751 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257120.519:59008):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171257120.519:59009): avc:  denied  { read } for  pid=12751 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257120.519:59009): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12751 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171257122.099:59010): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.099:59010): arch=c000003e syscall=86 success=yes exit=0 a0=318d220 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257122.099:59011): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.099:59011): arch=c000003e syscall=87 success=yes exit=0 a0=318d220 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257122.100:59012): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.100:59012): arch=c000003e syscall=2 success=yes exit=9 a0=31b3cf0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257122.116:59013): avc:  denied  { create } for  pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.116:59013): arch=c000003e syscall=2 success=yes exit=6 a0=61d9d0 a1=c1 a2=124 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171257122.116:59014): avc:  denied  { write } for  pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.116:59014): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257122.116:59014):  path="/home/dhighley/_LHD.ic_zFB.douglas"
>type=AVC msg=audit(1171257122.116:59015): avc:  denied  { getattr } for  pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.116:59015): arch=c000003e syscall=4 success=yes exit=0 a0=61d9d0 a1=7fffa0176b70 a2=7fffa0176b70 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257122.116:59015):  path="/home/dhighley/_LHD.ic_zFB.douglas"
>type=AVC msg=audit(1171257122.116:59016): avc:  denied  { link } for  pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.116:59016): arch=c000003e syscall=86 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fffa0176a90 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171257122.116:59017): avc:  denied  { unlink } for  pid=12747 comm="procmail" name="_LHD.ic_zFB.douglas" dev=dm-0 ino=28442630 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257122.116:59017): arch=c000003e syscall=87 success=yes exit=0 a0=61d9d0 a1=61b510 a2=7fffa0176a90 a3=61d9d0 items=0 ppid=12744 pid=12747 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171257301.353:59018): user pid=12786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257301.354:59019): login pid=12786 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171257301.357:59020): user pid=12786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257301.357:59021): user pid=12786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171257601.735:59022): user pid=12838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257601.736:59023): login pid=12838 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171257601.737:59024): user pid=12839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257601.737:59025): login pid=12839 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171257601.740:59026): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257601.740:59027): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171257601.744:59028): user pid=12839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257601.744:59029): user pid=12839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171257601.771:59030): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171257601.772:59031): user pid=12838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171257901.126:59032): user pid=12897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171257901.127:59033): login pid=12897 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171257901.130:59034): user pid=12897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171257901.130:59035): user pid=12897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171257958.627:59036): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257958.627:59036): arch=c000003e syscall=2 success=yes exit=12 a0=3095cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257958.627:59037): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257958.627:59037): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257958.627:59037):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171257958.636:59038): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257958.636:59038): arch=c000003e syscall=2 success=yes exit=9 a0=31c4fd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257959.124:59039): avc:  denied  { search } for  pid=12949 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171257959.124:59039): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171257959.124:59040): avc:  denied  { getattr } for  pid=12949 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.124:59040): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff74aefa90 a2=7fff74aefa90 a3=6c6280 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.124:59040):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171257959.125:59041): avc:  denied  { read } for  pid=12949 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.125:59041): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171257959.125:59042): avc:  denied  { search } for  pid=12949 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171257959.125:59042): avc:  denied  { write } for  pid=12949 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171257959.125:59042): avc:  denied  { add_name } for  pid=12949 comm="pyzor" name="IrKIqx" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171257959.125:59042): avc:  denied  { create } for  pid=12949 comm="pyzor" name="IrKIqx" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.125:59042): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171257959.126:59043): avc:  denied  { getattr } for  pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.126:59043): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff74aedf80 a2=7fff74aedf80 a3=3 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.126:59043):  path="/tmp/IrKIqx"
>type=AVC msg=audit(1171257959.126:59044): avc:  denied  { write } for  pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.126:59044): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.126:59044):  path="/tmp/IrKIqx"
>type=AVC msg=audit(1171257959.126:59045): avc:  denied  { remove_name } for  pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171257959.126:59045): avc:  denied  { unlink } for  pid=12949 comm="pyzor" name="IrKIqx" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.126:59045): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171257959.127:59046): avc:  denied  { read } for  pid=12949 comm="pyzor" name="tmpUqOsh5" dev=dm-0 ino=30703660 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.127:59046): arch=c000003e syscall=0 success=yes exit=711 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=12949 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.127:59046):  path=2F746D702F746D7055714F736835202864656C6574656429
>type=AVC msg=audit(1171257959.673:59047): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.673:59047): arch=c000003e syscall=86 success=yes exit=0 a0=3380460 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257959.673:59048): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634233 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.673:59048): arch=c000003e syscall=87 success=yes exit=0 a0=3380460 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257959.674:59049): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.674:59049): arch=c000003e syscall=2 success=yes exit=9 a0=32ee300 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171257959.726:59050): avc:  denied  { create } for  pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.726:59050): arch=c000003e syscall=2 success=yes exit=6 a0=61c990 a1=c1 a2=124 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171257959.726:59051): avc:  denied  { write } for  pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.726:59051): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.726:59051):  path="/home/dhighley/_RKD.np_zFB.douglas"
>type=AVC msg=audit(1171257959.727:59052): avc:  denied  { getattr } for  pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.727:59052): arch=c000003e syscall=4 success=yes exit=0 a0=61c990 a1=7fffa9d20720 a2=7fffa9d20720 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171257959.727:59052):  path="/home/dhighley/_RKD.np_zFB.douglas"
>type=AVC msg=audit(1171257959.727:59053): avc:  denied  { link } for  pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.727:59053): arch=c000003e syscall=86 success=yes exit=0 a0=61c990 a1=61b520 a2=7fffa9d20640 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171257959.727:59054): avc:  denied  { unlink } for  pid=12945 comm="procmail" name="_RKD.np_zFB.douglas" dev=dm-0 ino=28442635 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171257959.727:59054): arch=c000003e syscall=87 success=yes exit=0 a0=61c990 a1=61b520 a2=7fffa9d20640 a3=61c990 items=0 ppid=12942 pid=12945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171258201.504:59055): user pid=13113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171258201.504:59056): login pid=13113 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171258201.504:59057): user pid=13114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171258201.504:59058): login pid=13114 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171258201.510:59059): user pid=13114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171258201.510:59060): user pid=13114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171258201.511:59061): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171258201.511:59062): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171258201.545:59063): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171258201.545:59064): user pid=13113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171258501.895:59065): user pid=13168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171258501.896:59066): login pid=13168 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171258501.899:59067): user pid=13168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171258501.899:59068): user pid=13168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171258801.259:59069): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171258801.259:59070): login pid=13213 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171258801.262:59071): user pid=13214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171258801.263:59072): login pid=13214 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171258801.263:59073): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171258801.263:59074): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171258801.272:59075): user pid=13214 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171258801.272:59076): user pid=13214 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171258801.281:59077): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171258801.281:59078): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171259033.116:59079): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171259033.117:59080): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171259101.629:59081): user pid=13300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171259101.630:59082): login pid=13300 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171259101.634:59083): user pid=13300 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171259101.634:59084): user pid=13300 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171259401.962:59085): user pid=13336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171259401.962:59086): login pid=13336 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171259401.964:59087): user pid=13337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171259401.964:59088): login pid=13337 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171259401.970:59089): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171259401.970:59090): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171259401.974:59091): user pid=13337 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171259401.974:59092): user pid=13337 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171259401.989:59093): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171259401.990:59094): user pid=13336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171259701.315:59095): user pid=13373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171259701.315:59096): login pid=13373 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171259701.319:59097): user pid=13373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171259701.319:59098): user pid=13373 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171260001.653:59099): user pid=13407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260001.653:59100): login pid=13407 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171260001.656:59101): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260001.656:59102): login pid=13408 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171260001.659:59103): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260001.659:59104): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171260001.661:59105): user pid=13408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260001.661:59106): user pid=13408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171260001.690:59107): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171260001.690:59108): user pid=13407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171260061.984:59109): user pid=13423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260061.985:59110): login pid=13423 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171260061.987:59111): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260061.987:59112): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171260062.873:59113): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171260062.873:59114): user pid=13423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171260301.881:59115): user pid=13459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260301.881:59116): login pid=13459 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171260301.885:59117): user pid=13459 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260301.885:59118): user pid=13459 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171260601.224:59119): user pid=13494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260601.224:59120): login pid=13494 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171260601.224:59121): user pid=13493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260601.224:59122): login pid=13493 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171260601.230:59123): user pid=13494 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260601.230:59124): user pid=13494 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171260601.236:59125): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260601.236:59126): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171260601.258:59127): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171260601.259:59128): user pid=13493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171260901.556:59129): user pid=13530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171260901.557:59130): login pid=13530 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171260901.560:59131): user pid=13530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171260901.560:59132): user pid=13530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171261201.886:59133): user pid=13564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171261201.886:59134): login pid=13564 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171261201.888:59135): user pid=13563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171261201.888:59136): login pid=13563 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171261201.890:59137): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171261201.891:59138): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171261201.894:59139): user pid=13564 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171261201.894:59140): user pid=13564 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171261201.910:59141): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171261201.911:59142): user pid=13563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171261501.221:59143): user pid=13601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171261501.222:59144): login pid=13601 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171261501.224:59145): user pid=13601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171261501.225:59146): user pid=13601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171261801.563:59147): user pid=13635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171261801.563:59148): login pid=13635 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171261801.565:59149): user pid=13636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171261801.565:59150): login pid=13636 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171261801.566:59151): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171261801.567:59152): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171261801.578:59153): user pid=13636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171261801.578:59154): user pid=13636 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171261801.586:59155): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171261801.586:59156): user pid=13635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171262100.351:59157): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262100.351:59157): arch=c000003e syscall=2 success=yes exit=12 a0=322c3d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171262100.351:59158): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262100.351:59158): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262100.351:59158):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171262100.360:59159): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262100.360:59159): arch=c000003e syscall=2 success=yes exit=9 a0=3260d90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171262101.217:59160): avc:  denied  { search } for  pid=13683 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171262101.217:59160): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171262101.217:59161): avc:  denied  { getattr } for  pid=13683 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.217:59161): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff789c3970 a2=7fff789c3970 a3=6c6280 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.217:59161):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171262101.218:59162): avc:  denied  { read } for  pid=13683 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.218:59162): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171262101.218:59163): avc:  denied  { search } for  pid=13683 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.218:59163): avc:  denied  { write } for  pid=13683 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.218:59163): avc:  denied  { add_name } for  pid=13683 comm="pyzor" name="k9KdD_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.218:59163): avc:  denied  { create } for  pid=13683 comm="pyzor" name="k9KdD_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.218:59163): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171262101.219:59164): avc:  denied  { getattr } for  pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.219:59164): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff789c1e60 a2=7fff789c1e60 a3=3 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.219:59164):  path="/tmp/k9KdD_"
>type=AVC msg=audit(1171262101.219:59165): avc:  denied  { write } for  pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.219:59165): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.219:59165):  path="/tmp/k9KdD_"
>type=AVC msg=audit(1171262101.219:59166): avc:  denied  { remove_name } for  pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.219:59166): avc:  denied  { unlink } for  pid=13683 comm="pyzor" name="k9KdD_" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.219:59166): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171262101.223:59167): avc:  denied  { read } for  pid=13683 comm="pyzor" name="tmpZuRMxC" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.223:59167): arch=c000003e syscall=0 success=yes exit=1190 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=13683 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.223:59167):  path=2F746D702F746D705A75524D7843202864656C6574656429
>type=AVC msg=audit(1171262101.529:59168): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.529:59168): arch=c000003e syscall=86 success=yes exit=0 a0=3125800 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171262101.529:59169): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634222 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.529:59169): arch=c000003e syscall=87 success=yes exit=0 a0=3125800 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171262101.530:59170): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.530:59170): arch=c000003e syscall=2 success=yes exit=9 a0=335aec0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171262101.550:59171): avc:  denied  { write } for  pid=13679 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.550:59171): avc:  denied  { add_name } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.550:59171): avc:  denied  { create } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.550:59171): arch=c000003e syscall=2 success=yes exit=6 a0=61de20 a1=c1 a2=124 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171262101.550:59172): avc:  denied  { write } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.550:59172): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.550:59172):  path="/home/dhighley/_vVD.VqA0FB.douglas"
>type=AVC msg=audit(1171262101.551:59173): avc:  denied  { getattr } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.551:59173): arch=c000003e syscall=4 success=yes exit=0 a0=61de20 a1=7fffe0a3b440 a2=7fffe0a3b440 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171262101.551:59173):  path="/home/dhighley/_vVD.VqA0FB.douglas"
>type=AVC msg=audit(1171262101.551:59174): avc:  denied  { link } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.551:59174): arch=c000003e syscall=86 success=yes exit=0 a0=61de20 a1=61e020 a2=7fffe0a3b360 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171262101.551:59175): avc:  denied  { remove_name } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171262101.551:59175): avc:  denied  { unlink } for  pid=13679 comm="procmail" name="_vVD.VqA0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.551:59175): arch=c000003e syscall=87 success=yes exit=0 a0=61de20 a1=61e020 a2=7fffe0a3b360 a3=61de20 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171262101.551:59176): avc:  denied  { append } for  pid=13679 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171262101.551:59176): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=13674 pid=13679 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171262101.902:59177): user pid=13684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171262101.902:59178): login pid=13684 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171262101.906:59179): user pid=13684 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171262101.906:59180): user pid=13684 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171262354.602:59181): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171262354.602:59181): arch=c000003e syscall=62 success=yes exit=0 a0=3597 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171262401.230:59182): user pid=13727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171262401.231:59183): login pid=13727 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171262401.231:59184): user pid=13726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171262401.231:59185): login pid=13726 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171262401.236:59186): user pid=13727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171262401.236:59187): user pid=13727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171262401.243:59188): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171262401.243:59189): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171262401.266:59190): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171262401.266:59191): user pid=13726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171262701.568:59192): user pid=13765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171262701.568:59193): login pid=13765 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171262701.571:59194): user pid=13765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171262701.571:59195): user pid=13765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171263001.894:59196): user pid=13800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263001.894:59197): login pid=13800 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171263001.897:59198): user pid=13801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263001.897:59199): login pid=13801 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171263001.900:59200): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263001.900:59201): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171263001.903:59202): user pid=13801 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263001.903:59203): user pid=13801 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171263001.922:59204): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171263001.922:59205): user pid=13800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171263006.060:59206): avc:  denied  { search } for  pid=13822 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171263006.060:59206): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171263006.061:59207): avc:  denied  { search } for  pid=13822 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171263006.061:59207): avc:  denied  { write } for  pid=13822 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171263006.061:59207): avc:  denied  { add_name } for  pid=13822 comm="pyzor" name="DrbRHg" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171263006.061:59207): avc:  denied  { create } for  pid=13822 comm="pyzor" name="DrbRHg" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263006.061:59207): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171263006.061:59208): avc:  denied  { getattr } for  pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263006.061:59208): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff374468e0 a2=7fff374468e0 a3=3 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171263006.061:59208):  path="/tmp/DrbRHg"
>type=AVC msg=audit(1171263006.061:59209): avc:  denied  { write } for  pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263006.061:59209): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171263006.061:59209):  path="/tmp/DrbRHg"
>type=AVC msg=audit(1171263006.061:59210): avc:  denied  { remove_name } for  pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171263006.061:59210): avc:  denied  { unlink } for  pid=13822 comm="pyzor" name="DrbRHg" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263006.061:59210): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171263006.062:59211): avc:  denied  { read } for  pid=13822 comm="pyzor" name="tmpN98T0M" dev=dm-0 ino=30703659 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263006.062:59211): arch=c000003e syscall=0 success=yes exit=2267 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=13822 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171263006.062:59211):  path=2F746D702F746D704E393854304D202864656C6574656429
>type=AVC msg=audit(1171263011.349:59212): avc:  denied  { append } for  pid=13818 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171263011.349:59212): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=13813 pid=13818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171263301.244:59213): user pid=13846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263301.244:59214): login pid=13846 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171263301.248:59215): user pid=13846 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263301.248:59216): user pid=13846 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171263552.215:59217): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171263552.216:59218): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171263562.496:59219): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171263562.496:59220): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171263562.505:59221): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171263562.513:59222): login pid=3672 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171263562.523:59223): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171263562.523:59224): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171263601.580:59225): user pid=14113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171263601.581:59226): user pid=14114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263601.581:59227): login pid=14114 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171263601.582:59228): login pid=14113 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171263601.589:59229): user pid=14114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263601.589:59230): user pid=14114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171263601.591:59231): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263601.591:59232): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171263601.647:59233): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171263601.648:59234): user pid=14113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171263661.954:59235): user pid=14132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263661.954:59236): login pid=14132 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171263661.956:59237): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263661.957:59238): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171263662.918:59239): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171263662.918:59240): user pid=14132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171263901.928:59241): user pid=14187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171263901.928:59242): login pid=14187 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171263901.930:59243): user pid=14187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171263901.930:59244): user pid=14187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171264201.266:59245): user pid=14241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171264201.267:59246): login pid=14241 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171264201.269:59247): user pid=14242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171264201.269:59248): login pid=14242 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171264201.270:59249): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171264201.270:59250): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171264201.277:59251): user pid=14242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171264201.277:59252): user pid=14242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171264201.289:59253): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171264201.290:59254): user pid=14241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171264338.366:59255): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171264338.367:59256): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171264387.507:59257): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171264387.507:59258): user pid=12630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171264501.513:59259): user pid=14353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171264501.514:59260): login pid=14353 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171264501.517:59261): user pid=14353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171264501.517:59262): user pid=14353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171264801.841:59263): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171264801.841:59264): login pid=14387 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171264801.843:59265): user pid=14388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171264801.844:59266): login pid=14388 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171264801.848:59267): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171264801.848:59268): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171264801.851:59269): user pid=14388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171264801.851:59270): user pid=14388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171264801.881:59271): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171264801.881:59272): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171265101.189:59273): user pid=14427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171265101.189:59274): login pid=14427 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171265101.193:59275): user pid=14427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171265101.193:59276): user pid=14427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171265209.053:59277): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.053:59277): arch=c000003e syscall=2 success=yes exit=12 a0=33c96c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171265209.054:59278): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.054:59278): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265209.054:59278):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171265209.064:59279): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.064:59279): arch=c000003e syscall=2 success=yes exit=9 a0=312da90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171265209.606:59280): avc:  denied  { search } for  pid=14456 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171265209.606:59280): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171265209.606:59281): avc:  denied  { getattr } for  pid=14456 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.606:59281): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff97ee3e90 a2=7fff97ee3e90 a3=6c6280 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265209.606:59281):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171265209.606:59282): avc:  denied  { read } for  pid=14456 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.606:59282): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171265209.607:59283): avc:  denied  { search } for  pid=14456 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171265209.607:59283): avc:  denied  { write } for  pid=14456 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171265209.607:59283): avc:  denied  { add_name } for  pid=14456 comm="pyzor" name="iwn2lW" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171265209.607:59283): avc:  denied  { create } for  pid=14456 comm="pyzor" name="iwn2lW" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.607:59283): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171265209.607:59284): avc:  denied  { getattr } for  pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.607:59284): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff97ee2380 a2=7fff97ee2380 a3=3 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265209.607:59284):  path="/tmp/iwn2lW"
>type=AVC msg=audit(1171265209.608:59285): avc:  denied  { write } for  pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.608:59285): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265209.608:59285):  path="/tmp/iwn2lW"
>type=AVC msg=audit(1171265209.608:59286): avc:  denied  { remove_name } for  pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171265209.608:59286): avc:  denied  { unlink } for  pid=14456 comm="pyzor" name="iwn2lW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.608:59286): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171265209.609:59287): avc:  denied  { read } for  pid=14456 comm="pyzor" name="tmp8N8KG_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265209.609:59287): arch=c000003e syscall=0 success=yes exit=1431 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=14456 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265209.609:59287):  path=2F746D702F746D70384E384B475F202864656C6574656429
>type=AVC msg=audit(1171265211.791:59288): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.791:59288): arch=c000003e syscall=86 success=yes exit=0 a0=3396330 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171265211.791:59289): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.791:59289): arch=c000003e syscall=87 success=yes exit=0 a0=3396330 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171265211.793:59290): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.793:59290): arch=c000003e syscall=2 success=yes exit=9 a0=31eb3c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171265211.807:59291): avc:  denied  { write } for  pid=14452 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171265211.807:59291): avc:  denied  { add_name } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171265211.807:59291): avc:  denied  { create } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.807:59291): arch=c000003e syscall=2 success=yes exit=6 a0=61eda0 a1=c1 a2=124 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171265211.807:59292): avc:  denied  { write } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.807:59292): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265211.807:59292):  path="/home/dhighley/_0hD.7aB0FB.douglas"
>type=AVC msg=audit(1171265211.808:59293): avc:  denied  { getattr } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.808:59293): arch=c000003e syscall=4 success=yes exit=0 a0=61eda0 a1=7ffff8e29270 a2=7ffff8e29270 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171265211.808:59293):  path="/home/dhighley/_0hD.7aB0FB.douglas"
>type=AVC msg=audit(1171265211.808:59294): avc:  denied  { link } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.808:59294): arch=c000003e syscall=86 success=yes exit=0 a0=61eda0 a1=61efa0 a2=7ffff8e29190 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171265211.808:59295): avc:  denied  { remove_name } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171265211.808:59295): avc:  denied  { unlink } for  pid=14452 comm="procmail" name="_0hD.7aB0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.808:59295): arch=c000003e syscall=87 success=yes exit=0 a0=61eda0 a1=61efa0 a2=7ffff8e29190 a3=61eda0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171265211.808:59296): avc:  denied  { append } for  pid=14452 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171265211.808:59296): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14447 pid=14452 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171265401.518:59297): user pid=14476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171265401.518:59298): login pid=14476 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171265401.520:59299): user pid=14477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171265401.520:59300): login pid=14477 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171265401.521:59301): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171265401.521:59302): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171265401.525:59303): user pid=14477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171265401.525:59304): user pid=14477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171265401.547:59305): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171265401.547:59306): user pid=14476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171265701.862:59307): user pid=14517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171265701.862:59308): login pid=14517 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171265701.865:59309): user pid=14517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171265701.865:59310): user pid=14517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171266001.203:59311): user pid=14554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266001.204:59312): login pid=14554 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171266001.205:59313): user pid=14555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266001.205:59314): login pid=14555 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171266001.210:59315): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266001.210:59316): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171266001.213:59317): user pid=14555 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266001.213:59318): user pid=14555 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171266001.229:59319): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171266001.230:59320): user pid=14554 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171266301.551:59321): user pid=14592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266301.552:59322): login pid=14592 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171266301.556:59323): user pid=14592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266301.556:59324): user pid=14592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171266601.882:59325): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266601.882:59326): login pid=14625 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171266601.884:59327): user pid=14626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266601.885:59328): login pid=14626 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171266601.885:59329): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266601.885:59330): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171266601.895:59331): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266601.895:59332): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171266601.903:59333): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171266601.903:59334): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171266781.223:59335): user pid=14652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266781.223:59336): login pid=14652 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171266781.226:59337): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266781.226:59338): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171266781.335:59339): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171266781.335:59340): user pid=14652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171266901.339:59341): user pid=14670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171266901.339:59342): login pid=14670 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171266901.342:59343): user pid=14670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171266901.342:59344): user pid=14670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171266979.653:59345): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266979.653:59345): arch=c000003e syscall=2 success=yes exit=9 a0=30bfd40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171266980.532:59346): avc:  denied  { getattr } for  pid=14699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266980.532:59346): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbac87b00 a2=7fffbac87b00 a3=6c6280 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171266980.532:59346):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171266980.532:59347): avc:  denied  { read } for  pid=14699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266980.532:59347): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171266980.533:59348): avc:  denied  { search } for  pid=14699 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171266980.533:59348): avc:  denied  { write } for  pid=14699 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171266980.533:59348): avc:  denied  { add_name } for  pid=14699 comm="pyzor" name="qWFF43" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171266980.533:59348): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171266980.534:59349): avc:  denied  { remove_name } for  pid=14699 comm="pyzor" name="qWFF43" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171266980.534:59349): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=14699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171266982.050:59350): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.050:59350): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171266982.050:59350):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171266982.050:59351): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.050:59351): arch=c000003e syscall=86 success=yes exit=0 a0=3039980 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171266982.050:59352): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.050:59352): arch=c000003e syscall=87 success=yes exit=0 a0=3039980 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171266982.051:59353): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.051:59353): arch=c000003e syscall=2 success=yes exit=9 a0=33c9c50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171266982.079:59354): avc:  denied  { write } for  pid=14695 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171266982.079:59354): avc:  denied  { add_name } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171266982.079:59354): avc:  denied  { create } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.079:59354): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171266982.080:59355): avc:  denied  { write } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.080:59355): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171266982.080:59355):  path="/home/dhighley/_nlD.m2B0FB.douglas"
>type=AVC msg=audit(1171266982.080:59356): avc:  denied  { getattr } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.080:59356): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff261949b0 a2=7fff261949b0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171266982.080:59356):  path="/home/dhighley/_nlD.m2B0FB.douglas"
>type=AVC msg=audit(1171266982.080:59357): avc:  denied  { link } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.080:59357): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e880 a2=7fff261948d0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171266982.080:59358): avc:  denied  { remove_name } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171266982.080:59358): avc:  denied  { unlink } for  pid=14695 comm="procmail" name="_nlD.m2B0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171266982.080:59358): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e880 a2=7fff261948d0 a3=61b650 items=0 ppid=14690 pid=14695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171267201.669:59359): user pid=14721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267201.669:59360): login pid=14721 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171267201.671:59361): user pid=14722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267201.671:59362): login pid=14722 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171267201.673:59363): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267201.673:59364): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171267201.674:59365): user pid=14723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267201.674:59366): login pid=14723 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171267201.676:59367): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267201.676:59368): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171267201.689:59369): user pid=14723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267201.689:59370): user pid=14723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171267201.701:59371): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171267201.702:59372): user pid=14721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171267261.021:59373): user pid=14743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267261.021:59374): login pid=14743 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171267261.025:59375): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267261.025:59376): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171267261.934:59377): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171267261.934:59378): user pid=14743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171267501.944:59379): user pid=14782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267501.944:59380): login pid=14782 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171267501.949:59381): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267501.949:59382): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171267801.279:59383): user pid=14818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267801.279:59384): login pid=14818 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171267801.281:59385): user pid=14819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171267801.281:59386): login pid=14819 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171267801.283:59387): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267801.283:59388): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171267801.288:59389): user pid=14819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171267801.289:59390): user pid=14819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171267801.307:59391): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171267801.307:59392): user pid=14818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171268101.626:59393): user pid=14856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171268101.627:59394): login pid=14856 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171268101.631:59395): user pid=14856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171268101.631:59396): user pid=14856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171268401.954:59397): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171268401.954:59398): login pid=14896 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171268401.955:59399): user pid=14895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171268401.955:59400): login pid=14895 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171268401.958:59401): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171268401.958:59402): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171268401.963:59403): user pid=14896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171268401.964:59404): user pid=14896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171268401.978:59405): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171268401.978:59406): user pid=14895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171268654.081:59407): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171268654.081:59407): arch=c000003e syscall=2 success=yes exit=12 a0=33c6e50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171268659.667:59408): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171268659.667:59408): arch=c000003e syscall=62 success=yes exit=0 a0=3a5e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171268701.291:59409): user pid=14948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171268701.292:59410): login pid=14948 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171268701.295:59411): user pid=14948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171268701.295:59412): user pid=14948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171269001.627:59413): user pid=14983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269001.627:59414): login pid=14983 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171269001.628:59415): user pid=14984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269001.628:59416): login pid=14984 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171269001.632:59417): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269001.633:59418): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171269001.633:59419): user pid=14984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269001.633:59420): user pid=14984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171269001.663:59421): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171269001.663:59422): user pid=14983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171269301.963:59423): user pid=15020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269301.963:59424): login pid=15020 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171269301.966:59425): user pid=15020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269301.966:59426): user pid=15020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171269601.291:59427): user pid=15053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269601.291:59428): login pid=15053 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171269601.293:59429): user pid=15054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269601.294:59430): login pid=15054 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171269601.297:59431): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269601.297:59432): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171269601.299:59433): user pid=15054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269601.299:59434): user pid=15054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171269601.317:59435): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171269601.317:59436): user pid=15053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171269901.639:59437): user pid=15095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171269901.639:59438): login pid=15095 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171269901.641:59439): user pid=15095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171269901.642:59440): user pid=15095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171270201.964:59441): user pid=15132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270201.964:59442): login pid=15132 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171270201.966:59443): user pid=15133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270201.966:59444): login pid=15133 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171270201.967:59445): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270201.967:59446): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171270201.974:59447): user pid=15133 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270201.974:59448): user pid=15133 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171270201.990:59449): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171270201.991:59450): user pid=15132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171270501.313:59451): user pid=15168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270501.314:59452): login pid=15168 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171270501.316:59453): user pid=15168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270501.316:59454): user pid=15168 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171270801.641:59455): user pid=15202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270801.641:59456): login pid=15202 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171270801.643:59457): user pid=15203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270801.643:59458): login pid=15203 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171270801.644:59459): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270801.644:59460): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171270801.653:59461): user pid=15203 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270801.653:59462): user pid=15203 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171270801.661:59463): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171270801.662:59464): user pid=15202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171270861.984:59465): user pid=15218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171270861.984:59466): login pid=15218 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171270861.988:59467): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171270861.988:59468): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171270862.869:59469): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171270862.870:59470): user pid=15218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171271101.877:59471): user pid=15253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171271101.878:59472): login pid=15253 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171271101.880:59473): user pid=15253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171271101.881:59474): user pid=15253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171271129.122:59475): avc:  denied  { search } for  pid=15276 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171271129.122:59475): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171271129.123:59476): avc:  denied  { search } for  pid=15276 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171271129.123:59476): avc:  denied  { write } for  pid=15276 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171271129.123:59476): avc:  denied  { add_name } for  pid=15276 comm="pyzor" name="dEomte" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171271129.123:59476): avc:  denied  { create } for  pid=15276 comm="pyzor" name="dEomte" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271129.123:59476): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171271129.124:59477): avc:  denied  { getattr } for  pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271129.124:59477): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff90973e10 a2=7fff90973e10 a3=3 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171271129.124:59477):  path="/tmp/dEomte"
>type=AVC msg=audit(1171271129.124:59478): avc:  denied  { write } for  pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271129.124:59478): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171271129.124:59478):  path="/tmp/dEomte"
>type=AVC msg=audit(1171271129.124:59479): avc:  denied  { remove_name } for  pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171271129.124:59479): avc:  denied  { unlink } for  pid=15276 comm="pyzor" name="dEomte" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271129.124:59479): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171271129.126:59480): avc:  denied  { read } for  pid=15276 comm="pyzor" name="tmpOzDYfs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271129.126:59480): arch=c000003e syscall=0 success=yes exit=2427 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15276 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171271129.126:59480):  path=2F746D702F746D704F7A44596673202864656C6574656429
>type=AVC msg=audit(1171271134.120:59481): avc:  denied  { write } for  pid=15272 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171271134.120:59481): avc:  denied  { add_name } for  pid=15272 comm="procmail" name="_ouD.e3C0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171271134.120:59481): arch=c000003e syscall=2 success=yes exit=6 a0=620810 a1=c1 a2=124 a3=620810 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171271134.121:59482): avc:  denied  { remove_name } for  pid=15272 comm="procmail" name="_ouD.e3C0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171271134.121:59482): arch=c000003e syscall=87 success=yes exit=0 a0=620810 a1=620a10 a2=7fff1ba77390 a3=620810 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171271134.121:59483): avc:  denied  { append } for  pid=15272 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171271134.121:59483): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15267 pid=15272 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171271401.202:59484): user pid=15301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171271401.202:59485): login pid=15301 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171271401.205:59486): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171271401.205:59487): login pid=15302 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171271401.206:59488): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171271401.206:59489): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171271401.219:59490): user pid=15302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171271401.219:59491): user pid=15302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171271401.226:59492): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171271401.227:59493): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171271701.550:59494): user pid=15339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171271701.551:59495): login pid=15339 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171271701.555:59496): user pid=15339 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171271701.555:59497): user pid=15339 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171272001.874:59498): user pid=15371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272001.874:59499): login pid=15371 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171272001.877:59500): user pid=15372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272001.877:59501): login pid=15372 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171272001.880:59502): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272001.880:59503): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171272001.882:59504): user pid=15372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272001.882:59505): user pid=15372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171272001.902:59506): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171272001.902:59507): user pid=15371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171272301.213:59508): user pid=15408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272301.213:59509): login pid=15408 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171272301.216:59510): user pid=15408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272301.216:59511): user pid=15408 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171272601.541:59512): user pid=15442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272601.541:59513): login pid=15442 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171272601.543:59514): user pid=15443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272601.543:59515): login pid=15443 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171272601.545:59516): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272601.545:59517): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171272601.548:59518): user pid=15443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272601.548:59519): user pid=15443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171272601.564:59520): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171272601.564:59521): user pid=15442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171272694.178:59522): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272694.178:59522): arch=c000003e syscall=2 success=yes exit=12 a0=331c480 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272694.179:59523): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272694.179:59523): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272694.179:59523):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171272694.188:59524): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272694.188:59524): arch=c000003e syscall=2 success=yes exit=9 a0=31a3ed0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272694.988:59525): avc:  denied  { getattr } for  pid=15472 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272694.988:59525): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1ed75d20 a2=7fff1ed75d20 a3=6c6280 items=0 ppid=6550 pid=15472 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272694.988:59525):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171272694.988:59526): avc:  denied  { read } for  pid=15472 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272694.988:59526): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15472 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171272699.951:59527): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171272699.951:59527): arch=c000003e syscall=62 success=yes exit=0 a0=3c70 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272699.964:59528): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.964:59528): arch=c000003e syscall=86 success=yes exit=0 a0=32c2140 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272699.964:59529): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.964:59529): arch=c000003e syscall=87 success=yes exit=0 a0=32c2140 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272699.965:59530): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.965:59530): arch=c000003e syscall=2 success=yes exit=9 a0=32c74a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171272699.978:59531): avc:  denied  { create } for  pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.978:59531): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171272699.978:59532): avc:  denied  { write } for  pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.978:59532): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272699.978:59532):  path="/home/dhighley/_sxD.7PD0FB.douglas"
>type=AVC msg=audit(1171272699.978:59533): avc:  denied  { getattr } for  pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.978:59533): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff52e70870 a2=7fff52e70870 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272699.978:59533):  path="/home/dhighley/_sxD.7PD0FB.douglas"
>type=AVC msg=audit(1171272699.978:59534): avc:  denied  { link } for  pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.978:59534): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e610 a2=7fff52e70790 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171272699.979:59535): avc:  denied  { unlink } for  pid=15468 comm="procmail" name="_sxD.7PD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272699.979:59535): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e610 a2=7fff52e70790 a3=61b650 items=0 ppid=15463 pid=15468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171272901.877:59536): user pid=15493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171272901.878:59537): login pid=15493 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171272901.882:59538): user pid=15493 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171272901.882:59539): user pid=15493 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171272972.167:59540): avc:  denied  { search } for  pid=15517 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171272972.167:59540): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171272972.168:59541): avc:  denied  { create } for  pid=15517 comm="pyzor" name="iN8xua" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272972.168:59541): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171272972.168:59542): avc:  denied  { getattr } for  pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272972.168:59542): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd934bbf0 a2=7fffd934bbf0 a3=2 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272972.168:59542):  path="/tmp/iN8xua"
>type=AVC msg=audit(1171272972.169:59543): avc:  denied  { write } for  pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272972.169:59543): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272972.169:59543):  path="/tmp/iN8xua"
>type=AVC msg=audit(1171272972.169:59544): avc:  denied  { unlink } for  pid=15517 comm="pyzor" name="iN8xua" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272972.169:59544): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171272972.170:59545): avc:  denied  { read } for  pid=15517 comm="pyzor" name="tmpTpm06w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171272972.170:59545): arch=c000003e syscall=0 success=yes exit=154 a0=4 a1=2aaaaf34d000 a2=1000 a3=1b items=0 ppid=6550 pid=15517 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171272972.170:59545):  path=2F746D702F746D7054706D303677202864656C6574656429
>type=USER_ACCT msg=audit(1171273201.205:59546): user pid=15540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171273201.205:59547): login pid=15540 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171273201.208:59548): user pid=15541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171273201.208:59549): login pid=15541 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171273201.211:59550): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171273201.211:59551): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171273201.213:59552): user pid=15541 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171273201.213:59553): user pid=15541 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171273201.233:59554): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171273201.233:59555): user pid=15540 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171273501.549:59556): user pid=15578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171273501.549:59557): login pid=15578 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171273501.553:59558): user pid=15578 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171273501.553:59559): user pid=15578 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171273663.666:59560): avc:  denied  { search } for  pid=15610 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171273663.666:59560): avc:  denied  { write } for  pid=15610 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171273663.666:59560): avc:  denied  { add_name } for  pid=15610 comm="pyzor" name="SaeyY-" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171273663.666:59560): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15610 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171273663.667:59561): avc:  denied  { remove_name } for  pid=15610 comm="pyzor" name="SaeyY-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171273663.667:59561): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15610 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171273668.752:59562): avc:  denied  { append } for  pid=15606 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171273668.752:59562): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15601 pid=15606 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171273801.886:59563): user pid=15624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171273801.886:59564): login pid=15624 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171273801.887:59565): user pid=15625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171273801.887:59566): login pid=15625 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171273801.892:59567): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171273801.892:59568): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171273801.895:59569): user pid=15625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171273801.895:59570): user pid=15625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171273801.913:59571): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171273801.914:59572): user pid=15624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171273963.312:59573): avc:  denied  { write } for  pid=15653 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171273963.312:59573): avc:  denied  { add_name } for  pid=15653 comm="procmail" name="_l0D.rjD0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171273963.312:59573): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=15650 pid=15653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171273963.313:59574): avc:  denied  { remove_name } for  pid=15653 comm="procmail" name="_l0D.rjD0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171273963.313:59574): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61c750 a2=7fffc88c51e0 a3=61b670 items=0 ppid=15650 pid=15653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171274101.230:59575): user pid=15672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171274101.231:59576): login pid=15672 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171274101.235:59577): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171274101.235:59578): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171274401.565:59579): user pid=15706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171274401.566:59580): login pid=15706 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171274401.568:59581): user pid=15707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171274401.568:59582): login pid=15707 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171274401.569:59583): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171274401.570:59584): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171274401.575:59585): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171274401.575:59586): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171274401.590:59587): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171274401.590:59588): user pid=15706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171274461.909:59589): user pid=15727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171274461.910:59590): login pid=15727 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171274461.913:59591): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171274461.913:59592): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171274462.828:59593): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171274462.828:59594): user pid=15727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171274540.153:59595): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274540.153:59595): arch=c000003e syscall=2 success=yes exit=12 a0=33c6ff0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171274540.153:59596): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274540.153:59596): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171274540.153:59596):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171274540.160:59597): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274540.160:59597): arch=c000003e syscall=2 success=yes exit=9 a0=34dbc50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171274540.954:59598): avc:  denied  { getattr } for  pid=15759 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274540.954:59598): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0d2c6270 a2=7fff0d2c6270 a3=6c6280 items=0 ppid=6550 pid=15759 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171274540.954:59598):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171274540.954:59599): avc:  denied  { read } for  pid=15759 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274540.954:59599): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15759 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171274545.916:59600): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171274545.916:59600): arch=c000003e syscall=62 success=yes exit=0 a0=3d8f a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171274546.073:59601): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274546.073:59601): arch=c000003e syscall=86 success=yes exit=0 a0=31355b0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171274546.073:59602): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274546.073:59602): arch=c000003e syscall=87 success=yes exit=0 a0=31355b0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171274546.074:59603): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171274546.074:59603): arch=c000003e syscall=2 success=yes exit=9 a0=3279660 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171274701.837:59604): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171274701.837:59605): login pid=15784 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171274701.840:59606): user pid=15784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171274701.841:59607): user pid=15784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171275001.171:59608): user pid=15832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275001.172:59609): login pid=15832 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171275001.174:59610): user pid=15833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275001.175:59611): login pid=15833 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171275001.176:59612): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275001.176:59613): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171275001.189:59614): user pid=15833 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275001.189:59615): user pid=15833 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171275001.197:59616): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171275001.197:59617): user pid=15832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171275038.487:59618): avc:  denied  { search } for  pid=15856 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171275038.487:59618): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171275038.488:59619): avc:  denied  { create } for  pid=15856 comm="pyzor" name="cIDSgf" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275038.488:59619): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171275038.488:59620): avc:  denied  { getattr } for  pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275038.488:59620): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff94c590f0 a2=7fff94c590f0 a3=3 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171275038.488:59620):  path="/tmp/cIDSgf"
>type=AVC msg=audit(1171275038.488:59621): avc:  denied  { write } for  pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275038.488:59621): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171275038.488:59621):  path="/tmp/cIDSgf"
>type=AVC msg=audit(1171275038.489:59622): avc:  denied  { unlink } for  pid=15856 comm="pyzor" name="cIDSgf" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275038.489:59622): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171275038.490:59623): avc:  denied  { read } for  pid=15856 comm="pyzor" name="tmpsfhpiM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275038.490:59623): arch=c000003e syscall=0 success=yes exit=337 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=15856 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171275038.490:59623):  path=2F746D702F746D7073666870694D202864656C6574656429
>type=AVC msg=audit(1171275043.472:59624): avc:  denied  { create } for  pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275043.472:59624): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171275043.473:59625): avc:  denied  { write } for  pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275043.473:59625): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171275043.473:59625):  path="/home/dhighley/_r3D.j0D0FB.douglas"
>type=AVC msg=audit(1171275043.473:59626): avc:  denied  { getattr } for  pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275043.473:59626): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7ffff576a160 a2=7ffff576a160 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171275043.473:59626):  path="/home/dhighley/_r3D.j0D0FB.douglas"
>type=AVC msg=audit(1171275043.473:59627): avc:  denied  { link } for  pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275043.473:59627): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffff576a080 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171275043.473:59628): avc:  denied  { unlink } for  pid=15851 comm="procmail" name="_r3D.j0D0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171275043.473:59628): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffff576a080 a3=61a500 items=0 ppid=15846 pid=15851 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171275190.336:59629): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171275190.337:59630): user pid=14722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171275301.343:59631): user pid=15880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275301.343:59632): login pid=15880 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171275301.347:59633): user pid=15880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275301.347:59634): user pid=15880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171275601.678:59635): user pid=15915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275601.678:59636): login pid=15915 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171275601.681:59637): user pid=15916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275601.681:59638): login pid=15916 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171275601.684:59639): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275601.684:59640): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171275601.686:59641): user pid=15916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275601.686:59642): user pid=15916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171275601.713:59643): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171275601.714:59644): user pid=15915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171275870.177:59645): avc:  denied  { search } for  pid=15956 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171275870.177:59645): avc:  denied  { write } for  pid=15956 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171275870.177:59645): avc:  denied  { add_name } for  pid=15956 comm="pyzor" name="FOmVKw" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171275870.177:59645): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=15956 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171275870.177:59646): avc:  denied  { remove_name } for  pid=15956 comm="pyzor" name="FOmVKw" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171275870.177:59646): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=15956 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171275901.014:59647): user pid=15962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171275901.015:59648): login pid=15962 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171275901.018:59649): user pid=15962 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171275901.018:59650): user pid=15962 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171276201.352:59651): user pid=16002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171276201.353:59652): login pid=16002 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171276201.354:59653): user pid=16001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171276201.354:59654): login pid=16001 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171276201.356:59655): user pid=16002 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171276201.356:59656): user pid=16002 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171276201.365:59657): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171276201.365:59658): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171276201.383:59659): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171276201.384:59660): user pid=16001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171276218.596:59661): avc:  denied  { write } for  pid=16020 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171276218.596:59661): avc:  denied  { add_name } for  pid=16020 comm="procmail" name="_U6D.6GE0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171276218.596:59661): arch=c000003e syscall=2 success=yes exit=6 a0=61cb50 a1=c1 a2=124 a3=61cb50 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276218.596:59662): avc:  denied  { remove_name } for  pid=16020 comm="procmail" name="_U6D.6GE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171276218.596:59662): arch=c000003e syscall=87 success=yes exit=0 a0=61cb50 a1=61b520 a2=7fff36fd2770 a3=61cb50 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276218.597:59663): avc:  denied  { append } for  pid=16020 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276218.597:59663): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16015 pid=16020 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276303.706:59664): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276303.706:59664): arch=c000003e syscall=2 success=yes exit=9 a0=32c7090 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171276304.268:59665): avc:  denied  { getattr } for  pid=16041 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276304.268:59665): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff218bc860 a2=7fff218bc860 a3=6c6280 items=0 ppid=6550 pid=16041 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171276304.268:59665):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171276304.268:59666): avc:  denied  { read } for  pid=16041 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276304.268:59666): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16041 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171276309.229:59667): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171276309.229:59667): arch=c000003e syscall=62 success=yes exit=0 a0=3ea9 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171276309.852:59668): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.852:59668): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171276309.852:59668):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171276309.853:59669): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.853:59669): arch=c000003e syscall=86 success=yes exit=0 a0=322c820 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171276309.853:59670): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.853:59670): arch=c000003e syscall=87 success=yes exit=0 a0=322c820 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171276309.854:59671): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.854:59671): arch=c000003e syscall=2 success=yes exit=9 a0=2db2bb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171276309.867:59672): avc:  denied  { create } for  pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.867:59672): arch=c000003e syscall=2 success=yes exit=6 a0=6220d0 a1=c1 a2=124 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276309.868:59673): avc:  denied  { write } for  pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.868:59673): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171276309.868:59673):  path="/home/dhighley/_l6D.VIE0FB.douglas"
>type=AVC msg=audit(1171276309.868:59674): avc:  denied  { getattr } for  pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.868:59674): arch=c000003e syscall=4 success=yes exit=0 a0=6220d0 a1=7fff59a0e400 a2=7fff59a0e400 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171276309.868:59674):  path="/home/dhighley/_l6D.VIE0FB.douglas"
>type=AVC msg=audit(1171276309.868:59675): avc:  denied  { link } for  pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.868:59675): arch=c000003e syscall=86 success=yes exit=0 a0=6220d0 a1=61b520 a2=7fff59a0e320 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276309.868:59676): avc:  denied  { unlink } for  pid=16037 comm="procmail" name="_l6D.VIE0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276309.868:59676): arch=c000003e syscall=87 success=yes exit=0 a0=6220d0 a1=61b520 a2=7fff59a0e320 a3=6220d0 items=0 ppid=16034 pid=16037 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171276370.458:59677): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171276370.458:59677): arch=c000003e syscall=2 success=yes exit=12 a0=33ec660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171276501.694:59678): user pid=16068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171276501.695:59679): login pid=16068 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171276501.697:59680): user pid=16068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171276501.697:59681): user pid=16068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171276801.029:59682): user pid=16111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171276801.030:59683): login pid=16111 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171276801.030:59684): user pid=16112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171276801.031:59685): login pid=16112 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171276801.035:59686): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171276801.035:59687): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171276801.043:59688): user pid=16112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171276801.044:59689): user pid=16112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171276801.059:59690): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171276801.059:59691): user pid=16111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171277101.370:59692): user pid=16150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171277101.370:59693): login pid=16150 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171277101.373:59694): user pid=16150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171277101.373:59695): user pid=16150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171277401.696:59696): user pid=16184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171277401.696:59697): login pid=16184 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171277401.699:59698): user pid=16185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171277401.699:59699): login pid=16185 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171277401.702:59700): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171277401.702:59701): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171277401.704:59702): user pid=16185 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171277401.704:59703): user pid=16185 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171277401.724:59704): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171277401.724:59705): user pid=16184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171277701.038:59706): user pid=16220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171277701.038:59707): login pid=16220 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171277701.042:59708): user pid=16220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171277701.042:59709): user pid=16220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171278001.366:59710): user pid=16253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278001.366:59711): login pid=16253 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171278001.368:59712): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278001.368:59713): login pid=16254 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171278001.370:59714): user pid=16255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278001.370:59715): login pid=16255 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171278001.370:59716): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278001.371:59717): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171278001.379:59718): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278001.380:59719): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171278001.381:59720): user pid=16255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278001.388:59721): user pid=16255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171278001.402:59722): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171278001.402:59723): user pid=16253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171278061.711:59724): user pid=16274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278061.711:59725): login pid=16274 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171278061.715:59726): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278061.715:59727): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171278062.630:59728): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171278062.631:59729): user pid=16274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171278301.636:59730): user pid=16310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278301.637:59731): login pid=16310 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171278301.640:59732): user pid=16310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278301.641:59733): user pid=16310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171278601.959:59734): user pid=16357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278601.960:59735): login pid=16357 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171278601.962:59736): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278601.962:59737): login pid=16358 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171278601.962:59738): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278601.962:59739): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171278601.967:59740): user pid=16358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278601.968:59741): user pid=16358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171278601.995:59742): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171278601.995:59743): user pid=16357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171278901.303:59744): user pid=16399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171278901.303:59745): login pid=16399 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171278901.306:59746): user pid=16399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171278901.306:59747): user pid=16399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171279201.628:59748): user pid=16434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171279201.628:59749): login pid=16434 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171279201.630:59750): user pid=16435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171279201.630:59751): login pid=16435 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171279201.632:59752): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171279201.632:59753): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171279201.635:59754): user pid=16435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171279201.635:59755): user pid=16435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171279201.654:59756): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171279201.655:59757): user pid=16434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171279230.945:59758): avc:  denied  { search } for  pid=16457 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171279230.945:59758): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171279230.946:59759): avc:  denied  { create } for  pid=16457 comm="pyzor" name="zMGAaz" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279230.946:59759): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171279230.946:59760): avc:  denied  { getattr } for  pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279230.946:59760): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1631de30 a2=7fff1631de30 a3=3 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171279230.946:59760):  path="/tmp/zMGAaz"
>type=AVC msg=audit(1171279230.946:59761): avc:  denied  { write } for  pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279230.946:59761): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171279230.946:59761):  path="/tmp/zMGAaz"
>type=AVC msg=audit(1171279230.946:59762): avc:  denied  { unlink } for  pid=16457 comm="pyzor" name="zMGAaz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279230.946:59762): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171279230.947:59763): avc:  denied  { read } for  pid=16457 comm="pyzor" name="tmpWJr8Ee" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279230.947:59763): arch=c000003e syscall=0 success=yes exit=3102 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=16457 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171279230.947:59763):  path=2F746D702F746D70574A72384565202864656C6574656429
>type=AVC msg=audit(1171279236.412:59764): avc:  denied  { append } for  pid=16453 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171279236.412:59764): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16448 pid=16453 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171279501.967:59765): user pid=16481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171279501.968:59766): login pid=16481 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171279501.970:59767): user pid=16481 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171279501.970:59768): user pid=16481 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171279801.303:59769): user pid=16520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171279801.303:59770): login pid=16520 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171279801.305:59771): user pid=16521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171279801.305:59772): login pid=16521 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171279801.308:59773): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171279801.308:59774): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171279801.310:59775): user pid=16521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171279801.310:59776): user pid=16521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171279801.329:59777): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171279801.330:59778): user pid=16520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171279956.365:59779): avc:  denied  { search } for  pid=16553 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171279956.365:59779): avc:  denied  { write } for  pid=16553 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171279956.365:59779): avc:  denied  { add_name } for  pid=16553 comm="pyzor" name="KZ0wvE" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171279956.365:59779): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16553 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171279956.366:59780): avc:  denied  { remove_name } for  pid=16553 comm="pyzor" name="KZ0wvE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171279956.366:59780): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16553 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171280101.636:59781): user pid=16566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171280101.636:59782): login pid=16566 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171280101.640:59783): user pid=16566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171280101.640:59784): user pid=16566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171280401.960:59785): user pid=16598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171280401.961:59786): login pid=16598 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171280401.963:59787): user pid=16599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171280401.963:59788): login pid=16599 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171280401.965:59789): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171280401.965:59790): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171280401.974:59791): user pid=16599 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171280401.974:59792): user pid=16599 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171280401.983:59793): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171280401.983:59794): user pid=16598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171280620.354:59795): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280620.354:59795): arch=c000003e syscall=2 success=yes exit=9 a0=32ab460 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171280621.133:59796): avc:  denied  { getattr } for  pid=16637 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280621.133:59796): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0291c8c0 a2=7fff0291c8c0 a3=6c6280 items=0 ppid=6550 pid=16637 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171280621.133:59796):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171280621.133:59797): avc:  denied  { read } for  pid=16637 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280621.133:59797): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16637 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171280626.097:59798): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171280626.097:59798): arch=c000003e syscall=62 success=yes exit=0 a0=40fd a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171280626.114:59799): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.114:59799): arch=c000003e syscall=2 success=yes exit=9 a0=31abcd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171280626.124:59800): avc:  denied  { write } for  pid=16633 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171280626.124:59800): avc:  denied  { add_name } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171280626.124:59800): avc:  denied  { create } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.124:59800): arch=c000003e syscall=2 success=yes exit=6 a0=61c5f0 a1=c1 a2=124 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171280626.124:59801): avc:  denied  { write } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.124:59801): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171280626.124:59801):  path="/home/dhighley/_5DE.yLF0FB.douglas"
>type=AVC msg=audit(1171280626.125:59802): avc:  denied  { getattr } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.125:59802): arch=c000003e syscall=4 success=yes exit=0 a0=61c5f0 a1=7fff7ec98690 a2=7fff7ec98690 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171280626.125:59802):  path="/home/dhighley/_5DE.yLF0FB.douglas"
>type=AVC msg=audit(1171280626.125:59803): avc:  denied  { link } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.125:59803): arch=c000003e syscall=86 success=yes exit=0 a0=61c5f0 a1=61b510 a2=7fff7ec985b0 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171280626.125:59804): avc:  denied  { remove_name } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171280626.125:59804): avc:  denied  { unlink } for  pid=16633 comm="procmail" name="_5DE.yLF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171280626.125:59804): arch=c000003e syscall=87 success=yes exit=0 a0=61c5f0 a1=61b510 a2=7fff7ec985b0 a3=61c5f0 items=0 ppid=16630 pid=16633 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171280701.297:59805): user pid=16644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171280701.297:59806): login pid=16644 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171280701.300:59807): user pid=16644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171280701.300:59808): user pid=16644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171281001.629:59809): user pid=16682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281001.629:59810): login pid=16682 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171281001.631:59811): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281001.631:59812): login pid=16683 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171281001.632:59813): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281001.632:59814): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171281001.636:59815): user pid=16683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281001.636:59816): user pid=16683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171281001.655:59817): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171281001.655:59818): user pid=16682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171281078.247:59819): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171281078.247:59819): arch=c000003e syscall=2 success=yes exit=12 a0=3228ad0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171281078.247:59820): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171281078.247:59820): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171281078.247:59820):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171281081.093:59821): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171281081.093:59821): arch=c000003e syscall=86 success=yes exit=0 a0=31dc9e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171281081.093:59822): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171281081.093:59822): arch=c000003e syscall=87 success=yes exit=0 a0=31dc9e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171281301.966:59823): user pid=16731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281301.967:59824): login pid=16731 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171281301.971:59825): user pid=16731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281301.971:59826): user pid=16731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171281601.293:59827): user pid=16768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281601.293:59828): login pid=16768 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171281601.293:59829): user pid=16769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281601.293:59830): login pid=16769 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171281601.298:59831): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281601.298:59832): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171281601.303:59833): user pid=16769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281601.303:59834): user pid=16769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171281601.317:59835): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171281601.317:59836): user pid=16768 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171281661.623:59837): user pid=16784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281661.623:59838): login pid=16784 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171281661.626:59839): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281661.626:59840): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171281662.510:59841): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171281662.511:59842): user pid=16784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171281721.514:59843): user pid=16805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281721.514:59844): login pid=16805 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171281721.517:59845): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281721.517:59846): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171281761.269:59847): avc:  denied  { search } for  pid=16832 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171281761.269:59847): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=16832 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171281901.518:59848): user pid=16845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171281901.518:59849): login pid=16845 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171281901.522:59850): user pid=16845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171281901.522:59851): user pid=16845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171282087.256:59852): avc:  denied  { create } for  pid=16887 comm="pyzor" name="ompev2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282087.256:59852): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171282087.256:59853): avc:  denied  { getattr } for  pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282087.256:59853): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffc2f8ba0 a2=7ffffc2f8ba0 a3=2 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282087.256:59853):  path="/tmp/ompev2"
>type=AVC msg=audit(1171282087.256:59854): avc:  denied  { write } for  pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282087.256:59854): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282087.256:59854):  path="/tmp/ompev2"
>type=AVC msg=audit(1171282087.257:59855): avc:  denied  { unlink } for  pid=16887 comm="pyzor" name="ompev2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282087.257:59855): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171282087.264:59856): avc:  denied  { read } for  pid=16887 comm="pyzor" name="tmpXzzcPW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282087.264:59856): arch=c000003e syscall=0 success=yes exit=1670 a0=4 a1=2aaaaf34d000 a2=1000 a3=d7 items=0 ppid=6550 pid=16887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282087.264:59856):  path=2F746D702F746D70587A7A635057202864656C6574656429
>type=AVC msg=audit(1171282091.727:59857): avc:  denied  { search } for  pid=16896 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171282091.727:59857): avc:  denied  { write } for  pid=16896 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171282091.727:59857): avc:  denied  { add_name } for  pid=16896 comm="pyzor" name="31mDq7" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171282091.727:59857): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171282091.728:59858): avc:  denied  { remove_name } for  pid=16896 comm="pyzor" name="31mDq7" dev=dm-0 ino=30703647 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171282091.728:59858): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171282092.592:59859): avc:  denied  { append } for  pid=16883 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282092.592:59859): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16878 pid=16883 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171282201.848:59860): user pid=16908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171282201.848:59861): login pid=16908 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171282201.850:59862): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171282201.850:59863): login pid=16909 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171282201.850:59864): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171282201.851:59865): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171282201.855:59866): user pid=16909 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171282201.855:59867): user pid=16909 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171282201.872:59868): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171282201.872:59869): user pid=16908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171282501.194:59870): user pid=16953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171282501.195:59871): login pid=16953 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171282501.199:59872): user pid=16953 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171282501.199:59873): user pid=16953 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171282541.086:59874): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171282541.086:59874): arch=c000003e syscall=62 success=yes exit=0 a0=424e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282541.113:59875): avc:  denied  { write } for  pid=16970 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171282541.113:59875): avc:  denied  { add_name } for  pid=16970 comm="procmail" name="_KJE.tpF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171282541.113:59875): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=16965 pid=16970 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282541.114:59876): avc:  denied  { remove_name } for  pid=16970 comm="procmail" name="_KJE.tpF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171282541.114:59876): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61fe90 a2=7fffd94b0dd0 a3=61b650 items=0 ppid=16965 pid=16970 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282799.338:59877): avc:  denied  { write } for  pid=6550 comm="spamd" name="bayes_toks" dev=dm-0 ino=12485684 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282799.338:59877): arch=c000003e syscall=2 success=yes exit=11 a0=2fd2360 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282799.339:59878): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282799.339:59878): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282799.339:59879): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282799.339:59879): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282799.570:59880): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282799.570:59880): arch=c000003e syscall=2 success=yes exit=9 a0=3216810 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282800.274:59881): avc:  denied  { getattr } for  pid=17007 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282800.274:59881): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff466295d0 a2=7fff466295d0 a3=6c6280 items=0 ppid=6550 pid=17007 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282800.274:59881):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171282800.274:59882): avc:  denied  { read } for  pid=17007 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282800.274:59882): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17007 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171282801.525:59883): user pid=17008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171282801.525:59884): login pid=17008 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171282801.527:59885): user pid=17009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171282801.528:59886): login pid=17009 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171282801.529:59887): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171282801.530:59888): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171282801.540:59889): user pid=17009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171282801.540:59890): user pid=17009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171282801.560:59891): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171282801.561:59892): user pid=17008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171282805.459:59893): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.459:59893): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282805.459:59893):  path="/home/phighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171282805.459:59894): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.459:59894): arch=c000003e syscall=86 success=yes exit=0 a0=32bd110 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282805.459:59895): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.459:59895): arch=c000003e syscall=87 success=yes exit=0 a0=32bd110 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171282805.475:59896): avc:  denied  { create } for  pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.475:59896): arch=c000003e syscall=2 success=yes exit=6 a0=61cc60 a1=c1 a2=124 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282805.476:59897): avc:  denied  { write } for  pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59897): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282805.476:59897):  path="/home/phighley/_rJE.1tF0FB.douglas"
>type=AVC msg=audit(1171282805.476:59898): avc:  denied  { getattr } for  pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59898): arch=c000003e syscall=4 success=yes exit=0 a0=61cc60 a1=7fff33f85970 a2=7fff33f85970 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282805.476:59898):  path="/home/phighley/_rJE.1tF0FB.douglas"
>type=AVC msg=audit(1171282805.476:59899): avc:  denied  { link } for  pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59899): arch=c000003e syscall=86 success=yes exit=0 a0=61cc60 a1=61b520 a2=7fff33f85890 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282805.476:59900): avc:  denied  { unlink } for  pid=17003 comm="procmail" name="_rJE.1tF0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59900): arch=c000003e syscall=87 success=yes exit=0 a0=61cc60 a1=61b520 a2=7fff33f85890 a3=61cc60 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282805.476:59901): avc:  denied  { append } for  pid=17003 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59901): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171282805.476:59902): avc:  denied  { lock } for  pid=17003 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171282805.476:59902): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=16998 pid=17003 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171282805.476:59902):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171283101.867:59903): user pid=17049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171283101.867:59904): login pid=17049 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171283101.871:59905): user pid=17049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171283101.871:59906): user pid=17049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171283401.193:59907): user pid=17087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171283401.194:59908): login pid=17087 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171283401.195:59909): user pid=17086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171283401.195:59910): login pid=17086 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171283401.198:59911): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171283401.198:59912): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171283401.200:59913): user pid=17087 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171283401.200:59914): user pid=17087 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171283401.227:59915): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171283401.227:59916): user pid=17086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171283654.207:59917): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283654.207:59917): arch=c000003e syscall=2 success=yes exit=12 a0=33298e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171283658.925:59918): avc:  denied  { getattr } for  pid=17129 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283658.925:59918): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff5f87f30 a2=7ffff5f87f30 a3=6c6280 items=0 ppid=6550 pid=17129 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171283658.925:59918):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171283658.925:59919): avc:  denied  { read } for  pid=17129 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283658.925:59919): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17129 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171283701.524:59920): user pid=17134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171283701.524:59921): login pid=17134 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171283701.528:59922): user pid=17134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171283701.528:59923): user pid=17134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171283911.819:59924): avc:  denied  { search } for  pid=17167 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171283911.819:59924): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=17167 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171283971.202:59925): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283971.202:59925): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171283971.202:59926): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283971.202:59926): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171283972.728:59927): avc:  denied  { create } for  pid=17188 comm="pyzor" name="cvYL4P" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283972.728:59927): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171283972.728:59928): avc:  denied  { getattr } for  pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283972.728:59928): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcc478910 a2=7fffcc478910 a3=3 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171283972.728:59928):  path="/tmp/cvYL4P"
>type=AVC msg=audit(1171283972.728:59929): avc:  denied  { write } for  pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283972.728:59929): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171283972.728:59929):  path="/tmp/cvYL4P"
>type=AVC msg=audit(1171283972.728:59930): avc:  denied  { unlink } for  pid=17188 comm="pyzor" name="cvYL4P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283972.728:59930): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171283972.729:59931): avc:  denied  { read } for  pid=17188 comm="pyzor" name="tmpZ-iGOd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283972.729:59931): arch=c000003e syscall=0 success=yes exit=402 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=17188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171283972.729:59931):  path=2F746D702F746D705A2D69474F64202864656C6574656429
>type=AVC msg=audit(1171283977.909:59932): avc:  denied  { append } for  pid=17184 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171283977.909:59932): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=17179 pid=17184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171284001.862:59933): user pid=17196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284001.863:59934): login pid=17196 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171284001.865:59935): user pid=17197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284001.865:59936): login pid=17197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171284001.865:59937): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284001.865:59938): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171284001.871:59939): user pid=17197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284001.871:59940): user pid=17197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171284001.896:59941): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171284001.897:59942): user pid=17196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171284301.195:59943): user pid=17236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284301.195:59944): login pid=17236 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171284301.198:59945): user pid=17236 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284301.198:59946): user pid=17236 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171284601.523:59947): user pid=17271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284601.524:59948): login pid=17271 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171284601.526:59949): user pid=17272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284601.526:59950): login pid=17272 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171284601.528:59951): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284601.528:59952): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171284601.532:59953): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284601.532:59954): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171284601.548:59955): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171284601.549:59956): user pid=17271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171284901.866:59957): user pid=17307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171284901.867:59958): login pid=17307 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171284901.871:59959): user pid=17307 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171284901.871:59960): user pid=17307 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171285093.161:59961): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171285093.162:59962): user pid=16805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171285201.169:59963): user pid=17946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285201.169:59964): login pid=17946 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171285201.171:59965): user pid=17947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285201.172:59966): login pid=17947 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171285201.172:59967): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285201.172:59968): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171285201.179:59969): user pid=17947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285201.179:59970): user pid=17947 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171285201.197:59971): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171285201.197:59972): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171285261.510:59973): user pid=17965 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285261.511:59974): login pid=17965 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171285261.514:59975): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285261.514:59976): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171285262.428:59977): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171285262.428:59978): user pid=17965 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171285501.435:59979): user pid=18010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285501.435:59980): login pid=18010 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171285501.439:59981): user pid=18010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285501.439:59982): user pid=18010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171285801.766:59983): user pid=18055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285801.766:59984): login pid=18055 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171285801.767:59985): user pid=18056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171285801.767:59986): login pid=18056 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171285801.769:59987): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285801.769:59988): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171285801.779:59989): user pid=18056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171285801.779:59990): user pid=18056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171285801.788:59991): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171285801.788:59992): user pid=18055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171286038.536:59993): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171286038.536:59994): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171286101.541:59995): user pid=18095 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171286101.541:59996): login pid=18095 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171286101.544:59997): user pid=18095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171286101.544:59998): user pid=18095 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171286401.866:59999): user pid=18131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171286401.866:60000): login pid=18131 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171286401.868:60001): user pid=18132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171286401.869:60002): login pid=18132 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171286401.869:60003): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171286401.869:60004): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171286401.877:60005): user pid=18132 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171286401.878:60006): user pid=18132 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171286401.887:60007): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171286401.887:60008): user pid=18131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171286701.207:60009): user pid=18167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171286701.207:60010): login pid=18167 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171286701.210:60011): user pid=18167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171286701.210:60012): user pid=18167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171287001.530:60013): user pid=18204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287001.530:60014): login pid=18204 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171287001.532:60015): user pid=18205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287001.532:60016): login pid=18205 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171287001.537:60017): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287001.537:60018): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171287001.540:60019): user pid=18205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287001.540:60020): user pid=18205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171287001.554:60021): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171287001.554:60022): user pid=18204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171287301.864:60023): user pid=18243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287301.865:60024): login pid=18243 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171287301.867:60025): user pid=18243 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287301.867:60026): user pid=18243 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171287601.200:60027): user pid=18275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287601.200:60028): login pid=18275 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171287601.202:60029): user pid=18276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287601.202:60030): login pid=18276 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171287601.204:60031): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287601.204:60032): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171287601.207:60033): user pid=18276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287601.207:60034): user pid=18276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171287601.224:60035): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171287601.224:60036): user pid=18275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171287884.273:60037): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.273:60037): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287884.273:60037):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171287884.274:60038): avc:  denied  { link } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.274:60038): arch=c000003e syscall=86 success=yes exit=0 a0=347a410 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287884.274:60039): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.274:60039): arch=c000003e syscall=87 success=yes exit=0 a0=347a410 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287884.275:60040): avc:  denied  { write } for  pid=6550 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.275:60040): arch=c000003e syscall=2 success=yes exit=9 a0=2daa4c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287884.276:60041): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.276:60041): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287884.276:60042): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287884.276:60042): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287890.663:60043): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287890.663:60043): arch=c000003e syscall=1 success=yes exit=1296 a0=b a1=32eb4c0 a2=510 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287890.663:60043):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171287890.674:60044): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287890.674:60044): arch=c000003e syscall=2 success=yes exit=9 a0=32679d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287892.154:60045): avc:  denied  { search } for  pid=18323 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171287892.154:60045): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171287892.154:60046): avc:  denied  { getattr } for  pid=18323 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.154:60046): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff30f6af10 a2=7fff30f6af10 a3=6c6280 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287892.154:60046):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171287892.154:60047): avc:  denied  { read } for  pid=18323 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.154:60047): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171287892.155:60048): avc:  denied  { search } for  pid=18323 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171287892.155:60048): avc:  denied  { write } for  pid=18323 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171287892.155:60048): avc:  denied  { add_name } for  pid=18323 comm="pyzor" name="GjKn7w" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171287892.155:60048): avc:  denied  { create } for  pid=18323 comm="pyzor" name="GjKn7w" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.155:60048): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171287892.155:60049): avc:  denied  { getattr } for  pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.155:60049): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff30f69400 a2=7fff30f69400 a3=3 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287892.155:60049):  path="/tmp/GjKn7w"
>type=AVC msg=audit(1171287892.155:60050): avc:  denied  { write } for  pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.155:60050): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287892.155:60050):  path="/tmp/GjKn7w"
>type=AVC msg=audit(1171287892.155:60051): avc:  denied  { remove_name } for  pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171287892.155:60051): avc:  denied  { unlink } for  pid=18323 comm="pyzor" name="GjKn7w" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.155:60051): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171287892.156:60052): avc:  denied  { read } for  pid=18323 comm="pyzor" name="tmpuF2mXB" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287892.156:60052): arch=c000003e syscall=0 success=yes exit=377 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=18323 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287892.156:60052):  path=2F746D702F746D707546326D5842202864656C6574656429
>type=AVC msg=audit(1171287897.115:60053): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171287897.115:60053): arch=c000003e syscall=62 success=yes exit=0 a0=4793 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171287897.137:60054): avc:  denied  { write } for  pid=18314 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171287897.137:60054): avc:  denied  { add_name } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171287897.137:60054): avc:  denied  { create } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.137:60054): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171287897.137:60055): avc:  denied  { write } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.137:60055): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287897.137:60055):  path="/home/dhighley/_KeE.Z9G0FB.douglas"
>type=AVC msg=audit(1171287897.138:60056): avc:  denied  { getattr } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.138:60056): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffc4b57550 a2=7fffc4b57550 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171287897.138:60056):  path="/home/dhighley/_KeE.Z9G0FB.douglas"
>type=AVC msg=audit(1171287897.138:60057): avc:  denied  { link } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.138:60057): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffc4b57470 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171287897.138:60058): avc:  denied  { remove_name } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171287897.138:60058): avc:  denied  { unlink } for  pid=18314 comm="procmail" name="_KeE.Z9G0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.138:60058): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffc4b57470 a3=61a500 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171287897.138:60059): avc:  denied  { append } for  pid=18314 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171287897.138:60059): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=18309 pid=18314 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171287901.540:60060): user pid=18324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171287901.541:60061): login pid=18324 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171287901.544:60062): user pid=18324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171287901.544:60063): user pid=18324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171288201.869:60064): user pid=18357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288201.869:60065): login pid=18357 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171288201.870:60066): user pid=18358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288201.870:60067): login pid=18358 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171288201.875:60068): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288201.875:60069): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171288201.879:60070): user pid=18358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288201.879:60071): user pid=18358 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171288201.899:60072): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171288201.899:60073): user pid=18357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171288394.298:60074): avc:  denied  { search } for  pid=18396 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171288394.298:60074): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171288394.299:60075): avc:  denied  { create } for  pid=18396 comm="pyzor" name="6TdHrg" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288394.299:60075): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171288394.299:60076): avc:  denied  { getattr } for  pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288394.299:60076): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c7534f0 a2=7fff6c7534f0 a3=3 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171288394.299:60076):  path="/tmp/6TdHrg"
>type=AVC msg=audit(1171288394.299:60077): avc:  denied  { write } for  pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288394.299:60077): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171288394.299:60077):  path="/tmp/6TdHrg"
>type=AVC msg=audit(1171288394.299:60078): avc:  denied  { unlink } for  pid=18396 comm="pyzor" name="6TdHrg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288394.299:60078): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171288394.301:60079): avc:  denied  { read } for  pid=18396 comm="pyzor" name="tmpR09y6_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288394.301:60079): arch=c000003e syscall=0 success=yes exit=3295 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=18396 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171288394.301:60079):  path=2F746D702F746D7052303979365F202864656C6574656429
>type=USER_ACCT msg=audit(1171288501.222:60080): user pid=18406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288501.222:60081): login pid=18406 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171288501.226:60082): user pid=18406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288501.226:60083): user pid=18406 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171288548.680:60084): avc:  denied  { append } for  pid=18422 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171288548.680:60084): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=18419 pid=18422 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171288801.549:60085): user pid=18448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288801.549:60086): login pid=18448 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171288801.551:60087): user pid=18449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288801.551:60088): login pid=18449 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171288801.553:60089): user pid=18450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288801.553:60090): login pid=18450 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171288801.553:60091): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288801.553:60092): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171288801.558:60093): user pid=18450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288801.558:60094): user pid=18450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171288801.560:60095): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288801.560:60096): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171288801.580:60097): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171288801.580:60098): user pid=18448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171288861.897:60099): user pid=18471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171288861.897:60100): login pid=18471 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171288861.900:60101): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171288861.900:60102): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171288862.784:60103): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171288862.785:60104): user pid=18471 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171289101.792:60105): user pid=18511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171289101.793:60106): login pid=18511 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171289101.796:60107): user pid=18511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171289101.796:60108): user pid=18511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171289312.975:60109): avc:  denied  { search } for  pid=18550 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171289312.975:60109): avc:  denied  { write } for  pid=18550 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171289312.975:60109): avc:  denied  { add_name } for  pid=18550 comm="pyzor" name="tUG1iz" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171289312.975:60109): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=18550 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171289312.975:60110): avc:  denied  { remove_name } for  pid=18550 comm="pyzor" name="tUG1iz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171289312.975:60110): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18550 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171289315.226:60111): avc:  denied  { write } for  pid=18545 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171289315.226:60111): avc:  denied  { add_name } for  pid=18545 comm="procmail" name="_xhE.jTH0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171289315.226:60111): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=18540 pid=18545 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171289315.227:60112): avc:  denied  { remove_name } for  pid=18545 comm="procmail" name="_xhE.jTH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171289315.227:60112): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffbafb98c0 a3=61a500 items=0 ppid=18540 pid=18545 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171289401.132:60113): user pid=18560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171289401.132:60114): login pid=18560 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171289401.132:60115): user pid=18561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171289401.132:60116): login pid=18561 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171289401.137:60117): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171289401.137:60118): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171289401.138:60119): user pid=18561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171289401.138:60120): user pid=18561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171289401.161:60121): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171289401.162:60122): user pid=18560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171289701.467:60123): user pid=18601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171289701.467:60124): login pid=18601 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171289701.470:60125): user pid=18601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171289701.470:60126): user pid=18601 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171290001.789:60127): user pid=18636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290001.789:60128): login pid=18636 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171290001.792:60129): user pid=18637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290001.792:60130): login pid=18637 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171290001.795:60131): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290001.795:60132): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171290001.797:60133): user pid=18637 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290001.797:60134): user pid=18637 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171290001.825:60135): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171290001.825:60136): user pid=18636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171290185.483:60137): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290185.483:60137): arch=c000003e syscall=2 success=yes exit=12 a0=3556f40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290185.483:60138): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290185.483:60138): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171290185.483:60138):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171290185.501:60139): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290185.501:60139): arch=c000003e syscall=2 success=yes exit=9 a0=32d9530 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290186.188:60140): avc:  denied  { getattr } for  pid=18673 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290186.188:60140): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1e22a1d0 a2=7fff1e22a1d0 a3=6c6280 items=0 ppid=6550 pid=18673 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171290186.188:60140):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171290186.188:60141): avc:  denied  { read } for  pid=18673 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290186.188:60141): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=18673 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171290191.150:60142): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171290191.150:60142): arch=c000003e syscall=62 success=yes exit=0 a0=48f1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290191.248:60143): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.248:60143): arch=c000003e syscall=86 success=yes exit=0 a0=3449720 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290191.248:60144): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.248:60144): arch=c000003e syscall=87 success=yes exit=0 a0=3449720 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290191.249:60145): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.249:60145): arch=c000003e syscall=2 success=yes exit=9 a0=354e750 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171290191.260:60146): avc:  denied  { create } for  pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.260:60146): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171290191.260:60147): avc:  denied  { write } for  pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.260:60147): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171290191.260:60147):  path="/home/dhighley/_tjE.PhH0FB.douglas"
>type=AVC msg=audit(1171290191.260:60148): avc:  denied  { getattr } for  pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.260:60148): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff6d689080 a2=7fff6d689080 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171290191.260:60148):  path="/home/dhighley/_tjE.PhH0FB.douglas"
>type=AVC msg=audit(1171290191.261:60149): avc:  denied  { link } for  pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.261:60149): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61ec20 a2=7fff6d688fa0 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171290191.261:60150): avc:  denied  { unlink } for  pid=18669 comm="procmail" name="_tjE.PhH0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171290191.261:60150): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61ec20 a2=7fff6d688fa0 a3=61b650 items=0 ppid=18664 pid=18669 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171290301.133:60151): user pid=18703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290301.133:60152): login pid=18703 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171290301.137:60153): user pid=18703 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290301.137:60154): user pid=18703 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171290601.476:60155): user pid=18738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290601.477:60156): login pid=18738 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171290601.479:60157): user pid=18739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290601.479:60158): login pid=18739 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171290601.480:60159): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290601.480:60160): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171290601.483:60161): user pid=18739 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290601.484:60162): user pid=18739 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171290601.501:60163): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171290601.501:60164): user pid=18738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171290901.816:60165): user pid=18775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171290901.816:60166): login pid=18775 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171290901.819:60167): user pid=18775 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171290901.819:60168): user pid=18775 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171291201.139:60169): user pid=18811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171291201.140:60170): login pid=18811 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171291201.142:60171): user pid=18812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171291201.142:60172): login pid=18812 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171291201.145:60173): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171291201.146:60174): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171291201.147:60175): user pid=18812 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171291201.148:60176): user pid=18812 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171291201.168:60177): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171291201.169:60178): user pid=18811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171291501.479:60179): user pid=18848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171291501.480:60180): login pid=18848 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171291501.484:60181): user pid=18848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171291501.484:60182): user pid=18848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171291555.253:60183): avc:  denied  { search } for  pid=18871 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171291555.253:60183): avc:  denied  { write } for  pid=18871 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171291555.253:60183): avc:  denied  { add_name } for  pid=18871 comm="pyzor" name="9yWH5X" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171291555.253:60183): avc:  denied  { create } for  pid=18871 comm="pyzor" name="9yWH5X" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291555.253:60183): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171291555.254:60184): avc:  denied  { getattr } for  pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291555.254:60184): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff84ccafe0 a2=7fff84ccafe0 a3=3 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171291555.254:60184):  path="/tmp/9yWH5X"
>type=AVC msg=audit(1171291555.254:60185): avc:  denied  { write } for  pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291555.254:60185): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171291555.254:60185):  path="/tmp/9yWH5X"
>type=AVC msg=audit(1171291555.254:60186): avc:  denied  { remove_name } for  pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171291555.254:60186): avc:  denied  { unlink } for  pid=18871 comm="pyzor" name="9yWH5X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291555.254:60186): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171291555.255:60187): avc:  denied  { read } for  pid=18871 comm="pyzor" name="tmpxUeE-M" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291555.255:60187): arch=c000003e syscall=0 success=yes exit=711 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=18871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171291555.255:60187):  path=2F746D702F746D70785565452D4D202864656C6574656429
>type=AVC msg=audit(1171291560.433:60188): avc:  denied  { append } for  pid=18867 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171291560.433:60188): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18862 pid=18867 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171291801.809:60189): user pid=18901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171291801.809:60190): login pid=18901 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171291801.812:60191): user pid=18902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171291801.812:60192): login pid=18902 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171291801.814:60193): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171291801.814:60194): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171291801.820:60195): user pid=18902 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171291801.820:60196): user pid=18902 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171291801.836:60197): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171291801.836:60198): user pid=18901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171291926.710:60199): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171291926.710:60200): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171291926.720:60201): user pid=18926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171291926.721:60202): login pid=18926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171291926.722:60203): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171291926.779:60204): user pid=18929 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_REFR msg=audit(1171291926.790:60205): user pid=18929 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1171291936.880:60206): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171291936.880:60207): user pid=18926 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171291986.839:60208): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171291986.842:60209): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171291986.843:60210): login pid=18981 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171291986.843:60211): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171291986.852:60212): user pid=18986 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171291986.952:60213): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1171292084.325:60214): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171292084.325:60215): user pid=18981 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171292101.149:60216): user pid=19039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171292101.149:60217): login pid=19039 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171292101.152:60218): user pid=19039 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171292101.152:60219): user pid=19039 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171292222.491:60220): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292222.491:60220): arch=c000003e syscall=2 success=yes exit=12 a0=34bcd90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292222.492:60221): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292222.492:60221): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292222.492:60221):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171292222.504:60222): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292222.504:60222): arch=c000003e syscall=2 success=yes exit=9 a0=34b4290 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292223.195:60223): avc:  denied  { search } for  pid=19065 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171292223.195:60223): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171292223.195:60224): avc:  denied  { getattr } for  pid=19065 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.195:60224): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff067b9760 a2=7fff067b9760 a3=6c6280 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292223.195:60224):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171292223.195:60225): avc:  denied  { read } for  pid=19065 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.195:60225): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171292223.196:60226): avc:  denied  { search } for  pid=19065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171292223.196:60226): avc:  denied  { write } for  pid=19065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171292223.196:60226): avc:  denied  { add_name } for  pid=19065 comm="pyzor" name="bVswva" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171292223.196:60226): avc:  denied  { create } for  pid=19065 comm="pyzor" name="bVswva" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.196:60226): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171292223.196:60227): avc:  denied  { getattr } for  pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.196:60227): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff067b7c50 a2=7fff067b7c50 a3=3 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292223.196:60227):  path="/tmp/bVswva"
>type=AVC msg=audit(1171292223.196:60228): avc:  denied  { write } for  pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.196:60228): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292223.196:60228):  path="/tmp/bVswva"
>type=AVC msg=audit(1171292223.196:60229): avc:  denied  { remove_name } for  pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171292223.196:60229): avc:  denied  { unlink } for  pid=19065 comm="pyzor" name="bVswva" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.196:60229): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171292223.197:60230): avc:  denied  { read } for  pid=19065 comm="pyzor" name="tmp6vjNiD" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292223.197:60230): arch=c000003e syscall=0 success=yes exit=2426 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=19065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292223.197:60230):  path=2F746D702F746D7036766A4E6944202864656C6574656429
>type=AVC msg=audit(1171292228.158:60231): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171292228.158:60231): arch=c000003e syscall=62 success=yes exit=0 a0=4a79 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292228.171:60232): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.171:60232): arch=c000003e syscall=86 success=yes exit=0 a0=31fd950 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292228.171:60233): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.171:60233): arch=c000003e syscall=87 success=yes exit=0 a0=31fd950 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292228.172:60234): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.172:60234): arch=c000003e syscall=2 success=yes exit=9 a0=34b6b60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292228.182:60235): avc:  denied  { write } for  pid=19061 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171292228.182:60235): avc:  denied  { add_name } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171292228.182:60235): avc:  denied  { create } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.182:60235): arch=c000003e syscall=2 success=yes exit=6 a0=620830 a1=c1 a2=124 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171292228.183:60236): avc:  denied  { write } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.183:60236): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292228.183:60236):  path="/home/dhighley/_1pE.EBI0FB.douglas"
>type=AVC msg=audit(1171292228.183:60237): avc:  denied  { getattr } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.183:60237): arch=c000003e syscall=4 success=yes exit=0 a0=620830 a1=7fff66679070 a2=7fff66679070 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292228.183:60237):  path="/home/dhighley/_1pE.EBI0FB.douglas"
>type=AVC msg=audit(1171292228.183:60238): avc:  denied  { link } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.183:60238): arch=c000003e syscall=86 success=yes exit=0 a0=620830 a1=620a30 a2=7fff66678f90 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171292228.183:60239): avc:  denied  { remove_name } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171292228.183:60239): avc:  denied  { unlink } for  pid=19061 comm="procmail" name="_1pE.EBI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.183:60239): arch=c000003e syscall=87 success=yes exit=0 a0=620830 a1=620a30 a2=7fff66678f90 a3=620830 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171292228.183:60240): avc:  denied  { append } for  pid=19061 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292228.183:60240): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19058 pid=19061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171292401.476:60241): user pid=19089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171292401.477:60242): login pid=19089 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171292401.479:60243): user pid=19090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171292401.479:60244): login pid=19090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171292401.480:60245): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171292401.481:60246): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171292401.485:60247): user pid=19090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171292401.485:60248): user pid=19090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171292401.503:60249): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171292401.503:60250): user pid=19089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171292461.816:60251): user pid=19107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171292461.816:60252): login pid=19107 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171292461.819:60253): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171292461.819:60254): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171292462.705:60255): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171292462.706:60256): user pid=19107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171292701.712:60257): user pid=19151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171292701.712:60258): login pid=19151 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171292701.716:60259): user pid=19151 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171292701.716:60260): user pid=19151 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171292981.605:60261): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292981.605:60261): arch=c000003e syscall=2 success=yes exit=12 a0=349b0c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292981.605:60262): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292981.605:60262): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292981.605:60262):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171292981.610:60263): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292981.610:60263): arch=c000003e syscall=2 success=yes exit=9 a0=32694e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292986.657:60264): avc:  denied  { getattr } for  pid=19191 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292986.657:60264): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff7f3fee0 a2=7ffff7f3fee0 a3=6c6280 items=0 ppid=6550 pid=19191 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171292986.657:60264):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171292986.657:60265): avc:  denied  { read } for  pid=19191 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292986.657:60265): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19191 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171292991.620:60266): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171292991.620:60266): arch=c000003e syscall=62 success=yes exit=0 a0=4af7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292991.627:60267): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292991.627:60267): arch=c000003e syscall=86 success=yes exit=0 a0=33829f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292991.628:60268): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292991.628:60268): arch=c000003e syscall=87 success=yes exit=0 a0=33829f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171292991.628:60269): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171292991.628:60269): arch=c000003e syscall=2 success=yes exit=10 a0=33552b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171293001.043:60270): user pid=19196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293001.043:60271): login pid=19196 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171293001.045:60272): user pid=19197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293001.046:60273): login pid=19197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171293001.047:60274): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293001.048:60275): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171293001.053:60276): user pid=19197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293001.053:60277): user pid=19197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171293001.067:60278): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171293001.068:60279): user pid=19196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171293301.384:60280): user pid=19235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293301.384:60281): login pid=19235 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171293301.388:60282): user pid=19235 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293301.389:60283): user pid=19235 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171293428.418:60284): avc:  denied  { search } for  pid=19260 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171293428.418:60284): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171293428.419:60285): avc:  denied  { create } for  pid=19260 comm="pyzor" name="raFgWY" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293428.419:60285): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171293428.420:60286): avc:  denied  { getattr } for  pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293428.420:60286): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff25bc9470 a2=7fff25bc9470 a3=2 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171293428.420:60286):  path="/tmp/raFgWY"
>type=AVC msg=audit(1171293428.420:60287): avc:  denied  { write } for  pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293428.420:60287): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171293428.420:60287):  path="/tmp/raFgWY"
>type=AVC msg=audit(1171293428.420:60288): avc:  denied  { unlink } for  pid=19260 comm="pyzor" name="raFgWY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293428.420:60288): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171293428.430:60289): avc:  denied  { read } for  pid=19260 comm="pyzor" name="tmp-ycXWw" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293428.430:60289): arch=c000003e syscall=0 success=yes exit=2201 a0=4 a1=2aaaaf34d000 a2=1000 a3=141 items=0 ppid=6550 pid=19260 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171293428.430:60289):  path=2F746D702F746D702D7963585777202864656C6574656429
>type=AVC msg=audit(1171293433.605:60290): avc:  denied  { create } for  pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.605:60290): arch=c000003e syscall=2 success=yes exit=6 a0=61f060 a1=c1 a2=124 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171293433.606:60291): avc:  denied  { write } for  pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.606:60291): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171293433.606:60291):  path="/home/dhighley/_4sE.5TI0FB.douglas"
>type=AVC msg=audit(1171293433.606:60292): avc:  denied  { getattr } for  pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.606:60292): arch=c000003e syscall=4 success=yes exit=0 a0=61f060 a1=7fff609b4eb0 a2=7fff609b4eb0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171293433.606:60292):  path="/home/dhighley/_4sE.5TI0FB.douglas"
>type=AVC msg=audit(1171293433.606:60293): avc:  denied  { link } for  pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.606:60293): arch=c000003e syscall=86 success=yes exit=0 a0=61f060 a1=61b520 a2=7fff609b4dd0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171293433.606:60294): avc:  denied  { unlink } for  pid=19256 comm="procmail" name="_4sE.5TI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.606:60294): arch=c000003e syscall=87 success=yes exit=0 a0=61f060 a1=61b520 a2=7fff609b4dd0 a3=61f060 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171293433.606:60295): avc:  denied  { append } for  pid=19256 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171293433.606:60295): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19253 pid=19256 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171293601.715:60296): user pid=19276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293601.715:60297): login pid=19276 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171293601.718:60298): user pid=19277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293601.718:60299): login pid=19277 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171293601.718:60300): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293601.718:60301): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171293601.725:60302): user pid=19277 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293601.725:60303): user pid=19277 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171293601.738:60304): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171293601.738:60305): user pid=19276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171293733.901:60306): avc:  denied  { search } for  pid=19308 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171293733.901:60306): avc:  denied  { write } for  pid=19308 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171293733.901:60306): avc:  denied  { add_name } for  pid=19308 comm="pyzor" name="vNGwlR" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171293733.901:60306): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19308 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171293733.901:60307): avc:  denied  { remove_name } for  pid=19308 comm="pyzor" name="vNGwlR" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171293733.901:60307): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19308 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171293739.372:60308): avc:  denied  { write } for  pid=19304 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171293739.372:60308): avc:  denied  { add_name } for  pid=19304 comm="procmail" name="_otE.rYI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171293739.372:60308): arch=c000003e syscall=2 success=yes exit=6 a0=61cf10 a1=c1 a2=124 a3=61cf10 items=0 ppid=19299 pid=19304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171293739.372:60309): avc:  denied  { remove_name } for  pid=19304 comm="procmail" name="_otE.rYI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171293739.372:60309): arch=c000003e syscall=87 success=yes exit=0 a0=61cf10 a1=61b510 a2=7fff07818130 a3=61cf10 items=0 ppid=19299 pid=19304 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171293901.063:60310): user pid=19325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171293901.063:60311): login pid=19325 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171293901.067:60312): user pid=19325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171293901.067:60313): user pid=19325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171294201.399:60314): user pid=19364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171294201.399:60315): login pid=19364 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171294201.402:60316): user pid=19365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171294201.402:60317): login pid=19365 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171294201.403:60318): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171294201.403:60319): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171294201.409:60320): user pid=19365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171294201.409:60321): user pid=19365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171294201.422:60322): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171294201.422:60323): user pid=19364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171294425.990:60324): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294425.990:60324): arch=c000003e syscall=2 success=yes exit=12 a0=34345b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294425.990:60325): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294425.990:60325): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171294425.990:60325):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171294426.003:60326): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294426.003:60326): arch=c000003e syscall=2 success=yes exit=9 a0=34d71e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294431.051:60327): avc:  denied  { getattr } for  pid=19405 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294431.051:60327): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff785094b0 a2=7fff785094b0 a3=6c6280 items=0 ppid=6550 pid=19405 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171294431.051:60327):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171294431.051:60328): avc:  denied  { read } for  pid=19405 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294431.051:60328): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19405 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171294436.012:60329): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171294436.012:60329): arch=c000003e syscall=62 success=yes exit=0 a0=4bcd a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294436.023:60330): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.023:60330): arch=c000003e syscall=86 success=yes exit=0 a0=32ec7f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294436.023:60331): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.023:60331): arch=c000003e syscall=87 success=yes exit=0 a0=32ec7f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294436.024:60332): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.024:60332): arch=c000003e syscall=2 success=yes exit=10 a0=3484ed0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171294436.038:60333): avc:  denied  { create } for  pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.038:60333): arch=c000003e syscall=2 success=yes exit=6 a0=61fda0 a1=c1 a2=124 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171294436.039:60334): avc:  denied  { write } for  pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.039:60334): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171294436.039:60334):  path="/home/dhighley/_GvE.kjI0FB.douglas"
>type=AVC msg=audit(1171294436.039:60335): avc:  denied  { getattr } for  pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.039:60335): arch=c000003e syscall=4 success=yes exit=0 a0=61fda0 a1=7fffbe0b0ab0 a2=7fffbe0b0ab0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171294436.039:60335):  path="/home/dhighley/_GvE.kjI0FB.douglas"
>type=AVC msg=audit(1171294436.039:60336): avc:  denied  { link } for  pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.039:60336): arch=c000003e syscall=86 success=yes exit=0 a0=61fda0 a1=61fd80 a2=7fffbe0b09d0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171294436.039:60337): avc:  denied  { unlink } for  pid=19398 comm="procmail" name="_GvE.kjI0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171294436.039:60337): arch=c000003e syscall=87 success=yes exit=0 a0=61fda0 a1=61fd80 a2=7fffbe0b09d0 a3=61fda0 items=0 ppid=19393 pid=19398 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171294501.747:60338): user pid=19411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171294501.747:60339): login pid=19411 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171294501.750:60340): user pid=19411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171294501.750:60341): user pid=19411 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171294801.078:60342): user pid=19445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171294801.078:60343): login pid=19445 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171294801.080:60344): user pid=19446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171294801.081:60345): login pid=19446 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171294801.082:60346): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171294801.082:60347): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171294801.087:60348): user pid=19446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171294801.087:60349): user pid=19446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171294801.100:60350): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171294801.100:60351): user pid=19445 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171294957.378:60352): avc:  denied  { search } for  pid=19493 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171294957.378:60352): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19493 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171295101.420:60353): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171295101.421:60354): login pid=19508 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171295101.427:60355): user pid=19508 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171295101.427:60356): user pid=19508 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171295401.750:60357): user pid=19544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171295401.750:60358): login pid=19544 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171295401.752:60359): user pid=19545 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171295401.752:60360): login pid=19545 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171295401.754:60361): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171295401.754:60362): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171295401.757:60363): user pid=19545 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171295401.757:60364): user pid=19545 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171295401.786:60365): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171295401.786:60366): user pid=19544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171295520.181:60367): avc:  denied  { create } for  pid=19573 comm="pyzor" name="MpD2f2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295520.181:60367): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171295520.182:60368): avc:  denied  { getattr } for  pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295520.182:60368): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2e3f1890 a2=7fff2e3f1890 a3=3 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171295520.182:60368):  path="/tmp/MpD2f2"
>type=AVC msg=audit(1171295520.182:60369): avc:  denied  { write } for  pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295520.182:60369): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171295520.182:60369):  path="/tmp/MpD2f2"
>type=AVC msg=audit(1171295520.182:60370): avc:  denied  { unlink } for  pid=19573 comm="pyzor" name="MpD2f2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295520.182:60370): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171295520.183:60371): avc:  denied  { read } for  pid=19573 comm="pyzor" name="tmpBGVMiG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295520.183:60371): arch=c000003e syscall=0 success=yes exit=347 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=19573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171295520.183:60371):  path=2F746D702F746D704247564D6947202864656C6574656429
>type=AVC msg=audit(1171295525.347:60372): avc:  denied  { append } for  pid=19569 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171295525.347:60372): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19566 pid=19569 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171295701.099:60373): user pid=19589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171295701.099:60374): login pid=19589 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171295701.101:60375): user pid=19589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171295701.101:60376): user pid=19589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171296001.423:60377): user pid=19625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296001.424:60378): login pid=19625 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171296001.425:60379): user pid=19626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296001.425:60380): login pid=19626 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171296001.430:60381): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296001.430:60382): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171296001.435:60383): user pid=19626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296001.435:60384): user pid=19626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171296001.451:60385): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171296001.451:60386): user pid=19625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171296061.768:60387): user pid=19641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296061.768:60388): login pid=19641 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171296061.772:60389): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296061.772:60390): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171296062.656:60391): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171296062.657:60392): user pid=19641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171296277.224:60393): avc:  denied  { search } for  pid=19680 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171296277.224:60393): avc:  denied  { write } for  pid=19680 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171296277.224:60393): avc:  denied  { add_name } for  pid=19680 comm="pyzor" name="9Tydjd" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171296277.224:60393): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=19680 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171296277.224:60394): avc:  denied  { remove_name } for  pid=19680 comm="pyzor" name="9Tydjd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171296277.224:60394): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=19680 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171296282.207:60395): avc:  denied  { write } for  pid=19676 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171296282.207:60395): avc:  denied  { add_name } for  pid=19676 comm="procmail" name="_czE.aAJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171296282.207:60395): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=19673 pid=19676 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171296282.207:60396): avc:  denied  { remove_name } for  pid=19676 comm="procmail" name="_czE.aAJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171296282.207:60396): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff6da18330 a3=61a500 items=0 ppid=19673 pid=19676 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171296301.665:60397): user pid=19685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296301.665:60398): login pid=19685 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171296301.669:60399): user pid=19685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296301.669:60400): user pid=19685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171296601.999:60401): user pid=19722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296601.999:60402): login pid=19722 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171296602.000:60403): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296602.000:60404): login pid=19723 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171296602.005:60405): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296602.005:60406): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171296602.008:60407): user pid=19723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296602.008:60408): user pid=19723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171296602.030:60409): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171296602.030:60410): user pid=19722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171296787.636:60411): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171296787.637:60412): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171296901.641:60413): user pid=19761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171296901.641:60414): login pid=19761 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171296901.644:60415): user pid=19761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171296901.644:60416): user pid=19761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171297134.324:60417): avc:  denied  { getattr } for  pid=19798 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.324:60417): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff932bd260 a2=7fff932bd260 a3=6c6280 items=0 ppid=6550 pid=19798 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171297134.324:60417):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171297134.325:60418): avc:  denied  { read } for  pid=19798 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.325:60418): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=19798 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171297134.886:60419): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.886:60419): arch=c000003e syscall=2 success=yes exit=9 a0=32d7ae0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171297134.899:60420): avc:  denied  { create } for  pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.899:60420): arch=c000003e syscall=2 success=yes exit=6 a0=61b460 a1=c1 a2=124 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171297134.899:60421): avc:  denied  { write } for  pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.899:60421): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171297134.899:60421):  path="/home/dhighley/_S1E.uNJ0FB.douglas"
>type=AVC msg=audit(1171297134.899:60422): avc:  denied  { getattr } for  pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.899:60422): arch=c000003e syscall=4 success=yes exit=0 a0=61b460 a1=7fffc1f12910 a2=7fffc1f12910 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171297134.899:60422):  path="/home/dhighley/_S1E.uNJ0FB.douglas"
>type=AVC msg=audit(1171297134.899:60423): avc:  denied  { link } for  pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.899:60423): arch=c000003e syscall=86 success=yes exit=0 a0=61b460 a1=61c600 a2=7fffc1f12830 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171297134.899:60424): avc:  denied  { unlink } for  pid=19794 comm="procmail" name="_S1E.uNJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171297134.899:60424): arch=c000003e syscall=87 success=yes exit=0 a0=61b460 a1=61c600 a2=7fffc1f12830 a3=61b460 items=0 ppid=19791 pid=19794 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171297201.967:60425): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171297201.967:60426): login pid=19805 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171297201.968:60427): user pid=19804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171297201.968:60428): login pid=19804 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171297201.972:60429): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171297201.972:60430): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171297201.974:60431): user pid=19805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171297201.974:60432): user pid=19805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171297201.993:60433): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171297201.994:60434): user pid=19804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171297501.305:60435): user pid=19844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171297501.305:60436): login pid=19844 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171297501.309:60437): user pid=19844 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171297501.309:60438): user pid=19844 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171297801.630:60439): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171297801.630:60440): login pid=19878 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171297801.631:60441): user pid=19879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171297801.632:60442): login pid=19879 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171297801.633:60443): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171297801.633:60444): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171297801.643:60445): user pid=19879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171297801.643:60446): user pid=19879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171297801.653:60447): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171297801.653:60448): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171298101.969:60449): user pid=19915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171298101.970:60450): login pid=19915 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171298101.974:60451): user pid=19915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171298101.974:60452): user pid=19915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171298171.828:60453): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298171.828:60453): arch=c000003e syscall=2 success=yes exit=12 a0=327eda0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171298171.828:60454): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298171.828:60454): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171298171.828:60454):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171298171.834:60455): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298171.834:60455): arch=c000003e syscall=2 success=yes exit=9 a0=3199120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171298181.844:60456): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171298181.844:60456): arch=c000003e syscall=62 success=yes exit=0 a0=4de6 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171298181.976:60457): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298181.976:60457): arch=c000003e syscall=86 success=yes exit=0 a0=3239b40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171298181.976:60458): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298181.976:60458): arch=c000003e syscall=87 success=yes exit=0 a0=3239b40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171298401.299:60459): user pid=19962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171298401.299:60460): login pid=19962 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171298401.301:60461): user pid=19963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171298401.302:60462): login pid=19963 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171298401.302:60463): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171298401.302:60464): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171298401.310:60465): user pid=19963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171298401.310:60466): user pid=19963 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171298401.322:60467): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171298401.322:60468): user pid=19962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171298701.644:60469): user pid=20028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171298701.645:60470): login pid=20028 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171298701.649:60471): user pid=20028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171298701.649:60472): user pid=20028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171298767.335:60473): avc:  denied  { search } for  pid=20051 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171298767.335:60473): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171298767.336:60474): avc:  denied  { search } for  pid=20051 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171298767.336:60474): avc:  denied  { write } for  pid=20051 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171298767.336:60474): avc:  denied  { add_name } for  pid=20051 comm="pyzor" name="1NjYXH" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171298767.336:60474): avc:  denied  { create } for  pid=20051 comm="pyzor" name="1NjYXH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.336:60474): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171298767.337:60475): avc:  denied  { getattr } for  pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.337:60475): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb31a2640 a2=7fffb31a2640 a3=3 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171298767.337:60475):  path="/tmp/1NjYXH"
>type=AVC msg=audit(1171298767.337:60476): avc:  denied  { write } for  pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.337:60476): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171298767.337:60476):  path="/tmp/1NjYXH"
>type=AVC msg=audit(1171298767.337:60477): avc:  denied  { remove_name } for  pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171298767.337:60477): avc:  denied  { unlink } for  pid=20051 comm="pyzor" name="1NjYXH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.337:60477): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171298767.339:60478): avc:  denied  { read } for  pid=20051 comm="pyzor" name="tmpX0_817" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.339:60478): arch=c000003e syscall=0 success=yes exit=346 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=20051 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171298767.339:60478):  path=2F746D702F746D7058305F383137202864656C6574656429
>type=AVC msg=audit(1171298767.711:60479): avc:  denied  { write } for  pid=20046 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171298767.711:60479): avc:  denied  { add_name } for  pid=20046 comm="procmail" name="_O5E.PnJ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171298767.711:60479): arch=c000003e syscall=2 success=yes exit=6 a0=61c6f0 a1=c1 a2=124 a3=61c6f0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171298767.711:60480): avc:  denied  { remove_name } for  pid=20046 comm="procmail" name="_O5E.PnJ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171298767.711:60480): arch=c000003e syscall=87 success=yes exit=0 a0=61c6f0 a1=61b520 a2=7fff6964ff70 a3=61c6f0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171298767.711:60481): avc:  denied  { append } for  pid=20046 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171298767.711:60481): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=20043 pid=20046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171299001.972:60482): user pid=20080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299001.973:60483): login pid=20080 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171299001.973:60484): user pid=20081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299001.973:60485): login pid=20081 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171299001.978:60486): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299001.978:60487): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171299001.979:60488): user pid=20081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299001.980:60489): user pid=20081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171299002.001:60490): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171299002.001:60491): user pid=20080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171299195.467:60492): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299195.467:60492): arch=c000003e syscall=2 success=yes exit=12 a0=342d360 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171299195.467:60493): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299195.467:60493): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171299195.467:60493):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171299195.478:60494): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299195.478:60494): arch=c000003e syscall=2 success=yes exit=9 a0=34188e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171299196.479:60495): avc:  denied  { getattr } for  pid=20118 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299196.479:60495): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe5b1fac0 a2=7fffe5b1fac0 a3=6c6280 items=0 ppid=6550 pid=20118 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171299196.479:60495):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171299196.479:60496): avc:  denied  { read } for  pid=20118 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299196.479:60496): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20118 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171299201.441:60497): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171299201.441:60497): arch=c000003e syscall=62 success=yes exit=0 a0=4e96 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171299201.457:60498): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299201.457:60498): arch=c000003e syscall=86 success=yes exit=0 a0=32db650 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171299201.457:60499): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299201.457:60499): arch=c000003e syscall=87 success=yes exit=0 a0=32db650 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171299201.458:60500): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171299201.458:60500): arch=c000003e syscall=2 success=yes exit=9 a0=336f330 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171299301.314:60501): user pid=20141 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299301.314:60502): login pid=20141 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171299301.318:60503): user pid=20141 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299301.318:60504): user pid=20141 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171299601.640:60505): user pid=20177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299601.640:60506): login pid=20177 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171299601.643:60507): user pid=20178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299601.643:60508): login pid=20178 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171299601.644:60509): user pid=20179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299601.644:60510): login pid=20179 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171299601.645:60511): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299601.645:60512): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171299601.650:60513): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299601.650:60514): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171299601.654:60515): user pid=20179 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299601.654:60516): user pid=20179 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171299601.670:60517): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171299601.670:60518): user pid=20177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171299661.984:60519): user pid=20199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299661.985:60520): login pid=20199 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171299661.989:60521): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299661.989:60522): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171299662.902:60523): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171299662.903:60524): user pid=20199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171299901.912:60525): user pid=20237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171299901.912:60526): login pid=20237 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171299901.915:60527): user pid=20237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171299901.915:60528): user pid=20237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171300201.247:60529): user pid=20275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171300201.247:60530): login pid=20275 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171300201.248:60531): user pid=20276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171300201.249:60532): login pid=20276 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171300201.253:60533): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171300201.254:60534): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171300201.258:60535): user pid=20276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171300201.258:60536): user pid=20276 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171300201.275:60537): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171300201.275:60538): user pid=20275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171300501.590:60539): user pid=20312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171300501.590:60540): login pid=20312 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171300501.593:60541): user pid=20312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171300501.593:60542): user pid=20312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171300801.927:60543): user pid=20351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171300801.927:60544): user pid=20350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171300801.927:60545): login pid=20351 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171300801.927:60546): login pid=20350 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171300801.933:60547): user pid=20351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171300801.933:60548): user pid=20351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171300801.937:60549): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171300801.937:60550): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171300801.960:60551): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171300801.960:60552): user pid=20350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171301050.067:60553): avc:  denied  { search } for  pid=20395 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171301050.067:60553): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171301101.264:60554): user pid=20402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171301101.265:60555): login pid=20402 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171301101.269:60556): user pid=20402 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171301101.269:60557): user pid=20402 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171301401.602:60558): user pid=20441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171301401.603:60559): login pid=20441 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171301401.605:60560): user pid=20442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171301401.605:60561): login pid=20442 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171301401.606:60562): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171301401.607:60563): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171301401.610:60564): user pid=20442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171301401.610:60565): user pid=20442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171301401.629:60566): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171301401.629:60567): user pid=20441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171301701.951:60568): user pid=20477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171301701.951:60569): login pid=20477 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171301701.955:60570): user pid=20477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171301701.955:60571): user pid=20477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171302001.280:60572): user pid=20513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171302001.281:60573): user pid=20512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171302001.281:60574): login pid=20513 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171302001.281:60575): login pid=20512 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171302001.286:60576): user pid=20513 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302001.286:60577): user pid=20513 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171302001.290:60578): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302001.290:60579): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171302001.314:60580): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171302001.314:60581): user pid=20512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171302052.809:60582): avc:  denied  { search } for  pid=20538 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171302052.809:60582): avc:  denied  { write } for  pid=20538 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171302052.809:60582): avc:  denied  { add_name } for  pid=20538 comm="pyzor" name="VhMCh3" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171302052.809:60582): avc:  denied  { create } for  pid=20538 comm="pyzor" name="VhMCh3" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302052.809:60582): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171302052.809:60583): avc:  denied  { getattr } for  pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302052.809:60583): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe113c5d0 a2=7fffe113c5d0 a3=3 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171302052.809:60583):  path="/tmp/VhMCh3"
>type=AVC msg=audit(1171302052.810:60584): avc:  denied  { write } for  pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302052.810:60584): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171302052.810:60584):  path="/tmp/VhMCh3"
>type=AVC msg=audit(1171302052.810:60585): avc:  denied  { remove_name } for  pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171302052.810:60585): avc:  denied  { unlink } for  pid=20538 comm="pyzor" name="VhMCh3" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302052.810:60585): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171302052.811:60586): avc:  denied  { read } for  pid=20538 comm="pyzor" name="tmpbcQiLn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302052.811:60586): arch=c000003e syscall=0 success=yes exit=370 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=20538 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171302052.811:60586):  path=2F746D702F746D70626351694C6E202864656C6574656429
>type=AVC msg=audit(1171302057.795:60587): avc:  denied  { write } for  pid=20534 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171302057.795:60587): avc:  denied  { add_name } for  pid=20534 comm="procmail" name="_2AF.paK0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171302057.795:60587): arch=c000003e syscall=2 success=yes exit=6 a0=61b620 a1=c1 a2=124 a3=61b620 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171302057.795:60588): avc:  denied  { remove_name } for  pid=20534 comm="procmail" name="_2AF.paK0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171302057.795:60588): arch=c000003e syscall=87 success=yes exit=0 a0=61b620 a1=61cd80 a2=7fff1871d040 a3=61b620 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171302057.795:60589): avc:  denied  { append } for  pid=20534 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171302057.795:60589): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=20529 pid=20534 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171302301.611:60590): user pid=20560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171302301.611:60591): login pid=20560 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171302301.615:60592): user pid=20560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302301.615:60593): user pid=20560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171302601.936:60594): user pid=20594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171302601.936:60595): login pid=20594 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171302601.939:60596): user pid=20595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171302601.939:60597): login pid=20595 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171302601.939:60598): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302601.940:60599): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171302601.949:60600): user pid=20595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302601.949:60601): user pid=20595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171302601.959:60602): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171302601.959:60603): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171302901.275:60604): user pid=20631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171302901.276:60605): login pid=20631 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171302901.279:60606): user pid=20631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171302901.279:60607): user pid=20631 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171303201.602:60608): user pid=20669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303201.602:60609): login pid=20669 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171303201.604:60610): user pid=20670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303201.604:60611): login pid=20670 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171303201.606:60612): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303201.606:60613): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171303201.611:60614): user pid=20670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303201.611:60615): user pid=20670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171303201.624:60616): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171303201.624:60617): user pid=20669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171303261.946:60618): user pid=20686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303261.946:60619): login pid=20686 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171303261.949:60620): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303261.950:60621): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171303262.832:60622): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171303262.833:60623): user pid=20686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171303501.840:60624): user pid=20722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303501.841:60625): login pid=20722 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171303501.843:60626): user pid=20722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303501.843:60627): user pid=20722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171303801.164:60628): user pid=20756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303801.164:60629): login pid=20756 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171303801.166:60630): user pid=20757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171303801.167:60631): login pid=20757 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171303801.167:60632): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303801.167:60633): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171303801.174:60634): user pid=20757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171303801.174:60635): user pid=20757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171303801.189:60636): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171303801.189:60637): user pid=20756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171304101.505:60638): user pid=20792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171304101.505:60639): login pid=20792 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171304101.509:60640): user pid=20792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171304101.509:60641): user pid=20792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171304401.831:60642): user pid=20825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171304401.831:60643): login pid=20825 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171304401.834:60644): user pid=20826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171304401.834:60645): login pid=20826 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171304401.837:60646): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171304401.837:60647): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171304401.839:60648): user pid=20826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171304401.839:60649): user pid=20826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171304401.860:60650): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171304401.860:60651): user pid=20825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171304701.184:60652): user pid=20861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171304701.184:60653): login pid=20861 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171304701.187:60654): user pid=20861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171304701.187:60655): user pid=20861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171305001.517:60656): user pid=20896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171305001.517:60657): login pid=20896 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171305001.519:60658): user pid=20897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171305001.519:60659): login pid=20897 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171305001.520:60660): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305001.520:60661): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171305001.523:60662): user pid=20897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305001.523:60663): user pid=20897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171305001.541:60664): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171305001.541:60665): user pid=20896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171305039.989:60666): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305039.989:60666): arch=c000003e syscall=2 success=yes exit=12 a0=35506f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305039.990:60667): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305039.990:60667): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305039.990:60667):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171305039.995:60668): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305039.995:60668): arch=c000003e syscall=2 success=yes exit=9 a0=322c440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305043.822:60669): avc:  denied  { getattr } for  pid=20922 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305043.822:60669): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1c1fc1a0 a2=7fff1c1fc1a0 a3=6c6280 items=0 ppid=6550 pid=20922 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305043.822:60669):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171305043.822:60670): avc:  denied  { read } for  pid=20922 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305043.822:60670): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20922 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171305048.784:60671): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171305048.784:60671): arch=c000003e syscall=62 success=yes exit=0 a0=51ba a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305048.851:60672): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305048.851:60672): arch=c000003e syscall=86 success=yes exit=0 a0=31e0530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305048.851:60673): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305048.851:60673): arch=c000003e syscall=87 success=yes exit=0 a0=31e0530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305048.852:60674): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305048.852:60674): arch=c000003e syscall=2 success=yes exit=9 a0=3041b80 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171305056.377:60675): avc:  denied  { create } for  pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305056.377:60675): arch=c000003e syscall=2 success=yes exit=6 a0=623680 a1=c1 a2=124 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171305056.377:60676): avc:  denied  { write } for  pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305056.377:60676): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305056.377:60676):  path="/home/dhighley/__GF.gJL0FB.douglas"
>type=AVC msg=audit(1171305056.377:60677): avc:  denied  { getattr } for  pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305056.377:60677): arch=c000003e syscall=4 success=yes exit=0 a0=623680 a1=7fff83754150 a2=7fff83754150 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305056.377:60677):  path="/home/dhighley/__GF.gJL0FB.douglas"
>type=AVC msg=audit(1171305056.377:60678): avc:  denied  { link } for  pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305056.377:60678): arch=c000003e syscall=86 success=yes exit=0 a0=623680 a1=61b520 a2=7fff83754070 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171305056.378:60679): avc:  denied  { unlink } for  pid=20927 comm="procmail" name="__GF.gJL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305056.378:60679): arch=c000003e syscall=87 success=yes exit=0 a0=623680 a1=61b520 a2=7fff83754070 a3=623680 items=0 ppid=20924 pid=20927 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171305301.863:60680): user pid=20952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171305301.863:60681): login pid=20952 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171305301.868:60682): user pid=20952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305301.868:60683): user pid=20952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171305539.903:60684): avc:  denied  { search } for  pid=20987 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171305539.903:60684): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171305539.904:60685): avc:  denied  { create } for  pid=20987 comm="pyzor" name="hDbpze" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305539.904:60685): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171305539.905:60686): avc:  denied  { getattr } for  pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305539.905:60686): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff334ced70 a2=7fff334ced70 a3=6c6240 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305539.905:60686):  path="/tmp/hDbpze"
>type=AVC msg=audit(1171305539.905:60687): avc:  denied  { write } for  pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305539.905:60687): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305539.905:60687):  path="/tmp/hDbpze"
>type=AVC msg=audit(1171305539.905:60688): avc:  denied  { unlink } for  pid=20987 comm="pyzor" name="hDbpze" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305539.905:60688): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ca930 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171305539.909:60689): avc:  denied  { read } for  pid=20987 comm="pyzor" name="tmpi8pJ8U" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171305539.909:60689): arch=c000003e syscall=0 success=yes exit=1165 a0=4 a1=2aaaaf34d000 a2=1000 a3=c4 items=0 ppid=6550 pid=20987 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171305539.909:60689):  path=2F746D702F746D706938704A3855202864656C6574656429
>type=USER_ACCT msg=audit(1171305601.201:60690): user pid=20994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171305601.202:60691): user pid=20993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171305601.202:60692): login pid=20994 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171305601.202:60693): login pid=20993 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171305601.207:60694): user pid=20994 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305601.207:60695): user pid=20994 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171305601.212:60696): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305601.212:60697): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171305601.234:60698): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171305601.235:60699): user pid=20993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171305724.502:60700): avc:  denied  { search } for  pid=21026 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171305724.502:60700): avc:  denied  { write } for  pid=21026 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171305724.502:60700): avc:  denied  { add_name } for  pid=21026 comm="pyzor" name="b3vzjc" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171305724.502:60700): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=21026 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171305724.502:60701): avc:  denied  { remove_name } for  pid=21026 comm="pyzor" name="b3vzjc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171305724.502:60701): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21026 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171305901.534:60702): user pid=21042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171305901.534:60703): login pid=21042 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171305901.538:60704): user pid=21042 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171305901.538:60705): user pid=21042 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171306099.421:60706): avc:  denied  { getattr } for  pid=21079 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306099.421:60706): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff55aa4a50 a2=7fff55aa4a50 a3=6c6280 items=0 ppid=6550 pid=21079 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171306099.421:60706):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171306099.421:60707): avc:  denied  { read } for  pid=21079 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306099.421:60707): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=21079 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171306104.385:60708): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171306104.385:60708): arch=c000003e syscall=62 success=yes exit=0 a0=5257 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306104.395:60709): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306104.395:60709): arch=c000003e syscall=2 success=yes exit=9 a0=3572d20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306104.772:60710): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306104.772:60710): arch=c000003e syscall=2 success=yes exit=9 a0=31e8a60 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306158.150:60711): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306158.150:60711): arch=c000003e syscall=2 success=yes exit=12 a0=3259c70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306158.151:60712): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306158.151:60712): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171306158.151:60712):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171306160.058:60713): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306160.058:60713): arch=c000003e syscall=86 success=yes exit=0 a0=3574c30 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306160.058:60714): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306160.058:60714): arch=c000003e syscall=87 success=yes exit=0 a0=3574c30 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306177.118:60715): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306177.118:60715): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171306177.118:60716): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306177.118:60716): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171306201.860:60717): user pid=21227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306201.860:60718): login pid=21227 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171306201.862:60719): user pid=21228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306201.862:60720): login pid=21228 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171306201.867:60721): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306201.867:60722): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171306201.873:60723): user pid=21228 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306201.873:60724): user pid=21228 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171306201.889:60725): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171306201.889:60726): user pid=21227 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171306332.116:60727): avc:  denied  { write } for  pid=21403 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171306332.116:60727): avc:  denied  { add_name } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171306332.116:60727): avc:  denied  { create } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.116:60727): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171306332.116:60728): avc:  denied  { write } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.116:60728): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171306332.116:60728):  path="/home/dhighley/_bOF.cdL0FB.douglas"
>type=AVC msg=audit(1171306332.116:60729): avc:  denied  { getattr } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.116:60729): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff82c0d930 a2=7fff82c0d930 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171306332.116:60729):  path="/home/dhighley/_bOF.cdL0FB.douglas"
>type=AVC msg=audit(1171306332.117:60730): avc:  denied  { link } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.117:60730): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61c850 a2=7fff82c0d850 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171306332.117:60731): avc:  denied  { remove_name } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171306332.117:60731): avc:  denied  { unlink } for  pid=21403 comm="procmail" name="_bOF.cdL0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.117:60731): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61c850 a2=7fff82c0d850 a3=61b670 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171306332.117:60732): avc:  denied  { append } for  pid=21403 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171306332.117:60732): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21395 pid=21403 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171306501.199:60733): user pid=21596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306501.199:60734): login pid=21596 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171306501.203:60735): user pid=21596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306501.203:60736): user pid=21596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171306801.529:60737): user pid=21668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306801.529:60738): login pid=21668 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171306801.530:60739): user pid=21669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306801.530:60740): login pid=21669 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171306801.531:60741): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306801.531:60742): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171306801.538:60743): user pid=21669 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306801.538:60744): user pid=21669 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171306801.553:60745): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171306801.553:60746): user pid=21668 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171306861.871:60747): user pid=21684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171306861.871:60748): login pid=21684 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171306861.874:60749): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171306861.874:60750): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171306862.757:60751): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171306862.758:60752): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171307101.764:60753): user pid=21720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171307101.764:60754): login pid=21720 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171307101.768:60755): user pid=21720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171307101.768:60756): user pid=21720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171307401.095:60757): user pid=21758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171307401.095:60758): login pid=21758 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171307401.097:60759): user pid=21759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171307401.097:60760): login pid=21759 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171307401.101:60761): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171307401.102:60762): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171307401.107:60763): user pid=21759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171307401.107:60764): user pid=21759 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171307401.125:60765): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171307401.125:60766): user pid=21758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171307513.555:60767): avc:  denied  { create } for  pid=21790 comm="pyzor" name="gMEC3J" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171307513.555:60767): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171307513.555:60768): avc:  denied  { getattr } for  pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171307513.555:60768): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff62961210 a2=7fff62961210 a3=2 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171307513.555:60768):  path="/tmp/gMEC3J"
>type=AVC msg=audit(1171307513.555:60769): avc:  denied  { write } for  pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171307513.555:60769): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171307513.555:60769):  path="/tmp/gMEC3J"
>type=AVC msg=audit(1171307513.555:60770): avc:  denied  { unlink } for  pid=21790 comm="pyzor" name="gMEC3J" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171307513.555:60770): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171307513.560:60771): avc:  denied  { read } for  pid=21790 comm="pyzor" name="tmpmvzP1P" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171307513.560:60771): arch=c000003e syscall=0 success=yes exit=1911 a0=4 a1=2aaaaf34d000 a2=1000 a3=164 items=0 ppid=6550 pid=21790 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171307513.560:60771):  path=2F746D702F746D706D767A503150202864656C6574656429
>type=CRED_DISP msg=audit(1171307594.798:60772): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171307594.798:60773): user pid=20178 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171307701.804:60774): user pid=21810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171307701.804:60775): login pid=21810 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171307701.808:60776): user pid=21810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171307701.809:60777): user pid=21810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171308001.131:60778): user pid=21847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308001.132:60779): login pid=21847 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171308001.134:60780): user pid=21848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308001.134:60781): login pid=21848 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171308001.137:60782): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308001.137:60783): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171308001.141:60784): user pid=21848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308001.141:60785): user pid=21848 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171308001.167:60786): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171308001.167:60787): user pid=21847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171308186.998:60788): avc:  denied  { search } for  pid=21882 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171308186.998:60788): avc:  denied  { write } for  pid=21882 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171308186.998:60788): avc:  denied  { add_name } for  pid=21882 comm="pyzor" name="wujvJ1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171308186.998:60788): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=21882 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171308186.998:60789): avc:  denied  { remove_name } for  pid=21882 comm="pyzor" name="wujvJ1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171308186.998:60789): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=21882 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171308192.483:60790): avc:  denied  { write } for  pid=21878 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171308192.483:60790): avc:  denied  { add_name } for  pid=21878 comm="procmail" name="_2VF.g6L0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171308192.483:60790): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171308192.484:60791): avc:  denied  { remove_name } for  pid=21878 comm="procmail" name="_2VF.g6L0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171308192.484:60791): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d8f0 a2=7fff76ec57e0 a3=61b650 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171308192.484:60792): avc:  denied  { append } for  pid=21878 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308192.484:60792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21875 pid=21878 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171308301.473:60793): user pid=21895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308301.473:60794): login pid=21895 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171308301.476:60795): user pid=21895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308301.476:60796): user pid=21895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171308601.808:60797): user pid=21936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308601.808:60798): login pid=21936 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171308601.810:60799): user pid=21937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308601.810:60800): login pid=21937 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171308601.811:60801): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308601.811:60802): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171308601.821:60803): user pid=21937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308601.821:60804): user pid=21937 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171308601.832:60805): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171308601.833:60806): user pid=21936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171308603.220:60807): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308603.220:60807): arch=c000003e syscall=2 success=yes exit=12 a0=3333050 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171308603.220:60808): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308603.220:60808): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171308603.220:60808):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171308603.227:60809): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308603.227:60809): arch=c000003e syscall=2 success=yes exit=9 a0=303f5b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171308603.928:60810): avc:  denied  { getattr } for  pid=21958 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308603.928:60810): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff56fb2f60 a2=7fff56fb2f60 a3=6c6280 items=0 ppid=6550 pid=21958 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171308603.928:60810):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171308603.928:60811): avc:  denied  { read } for  pid=21958 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308603.928:60811): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=21958 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171308609.665:60812): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.665:60812): arch=c000003e syscall=86 success=yes exit=0 a0=32b9320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171308609.665:60813): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.665:60813): arch=c000003e syscall=87 success=yes exit=0 a0=32b9320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171308609.666:60814): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.666:60814): arch=c000003e syscall=2 success=yes exit=9 a0=2fdd010 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171308609.768:60815): avc:  denied  { create } for  pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.768:60815): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171308609.768:60816): avc:  denied  { write } for  pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.768:60816): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171308609.768:60816):  path="/home/dhighley/_CXF.BBM0FB.douglas"
>type=AVC msg=audit(1171308609.768:60817): avc:  denied  { getattr } for  pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.768:60817): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7ffff4c7c680 a2=7ffff4c7c680 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171308609.768:60817):  path="/home/dhighley/_CXF.BBM0FB.douglas"
>type=AVC msg=audit(1171308609.768:60818): avc:  denied  { link } for  pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.768:60818): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d1f0 a2=7ffff4c7c5a0 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171308609.769:60819): avc:  denied  { unlink } for  pid=21954 comm="procmail" name="_CXF.BBM0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171308609.769:60819): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d1f0 a2=7ffff4c7c5a0 a3=61b650 items=0 ppid=21949 pid=21954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171308901.158:60820): user pid=22003 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171308901.159:60821): login pid=22003 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171308901.163:60822): user pid=22003 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171308901.163:60823): user pid=22003 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171309201.486:60824): user pid=22048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171309201.486:60825): login pid=22048 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171309201.486:60826): user pid=22049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171309201.486:60827): login pid=22049 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171309201.492:60828): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171309201.492:60829): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171309201.497:60830): user pid=22049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171309201.497:60831): user pid=22049 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171309201.512:60832): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171309201.513:60833): user pid=22048 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171309501.823:60834): user pid=22085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171309501.824:60835): login pid=22085 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171309501.827:60836): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171309501.827:60837): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171309801.156:60838): user pid=22117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171309801.156:60839): login pid=22117 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171309801.158:60840): user pid=22118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171309801.158:60841): login pid=22118 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171309801.160:60842): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171309801.160:60843): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171309801.165:60844): user pid=22118 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171309801.165:60845): user pid=22118 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171309801.184:60846): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171309801.184:60847): user pid=22117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171310101.501:60848): user pid=22154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310101.501:60849): login pid=22154 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171310101.504:60850): user pid=22154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310101.504:60851): user pid=22154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171310401.831:60852): user pid=22190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310401.831:60853): login pid=22190 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171310401.833:60854): user pid=22191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310401.834:60855): login pid=22191 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171310401.834:60856): user pid=22189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310401.834:60857): login pid=22189 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171310401.838:60858): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310401.838:60859): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171310401.841:60860): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310401.841:60861): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171310401.850:60862): user pid=22191 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310401.850:60863): user pid=22191 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171310401.868:60864): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171310401.868:60865): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171310461.171:60866): user pid=22210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310461.171:60867): login pid=22210 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171310461.174:60868): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310461.174:60869): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171310462.086:60870): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171310462.087:60871): user pid=22210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171310701.094:60872): user pid=22246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171310701.095:60873): login pid=22246 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171310701.098:60874): user pid=22246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171310701.098:60875): user pid=22246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171311001.434:60876): user pid=22282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311001.434:60877): login pid=22282 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171311001.437:60878): user pid=22283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311001.437:60879): login pid=22283 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171311001.440:60880): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311001.440:60881): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171311001.442:60882): user pid=22283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311001.442:60883): user pid=22283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171311001.462:60884): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171311001.462:60885): user pid=22282 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171311301.780:60886): user pid=22320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311301.781:60887): login pid=22320 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171311301.784:60888): user pid=22320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311301.784:60889): user pid=22320 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171311601.107:60890): user pid=22353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311601.107:60891): login pid=22353 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171311601.108:60892): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311601.108:60893): login pid=22352 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171311601.111:60894): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311601.111:60895): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171311601.116:60896): user pid=22353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311601.116:60897): user pid=22353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171311601.133:60898): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171311601.133:60899): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171311901.454:60900): user pid=22388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171311901.454:60901): login pid=22388 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171311901.458:60902): user pid=22388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171311901.458:60903): user pid=22388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171312201.778:60904): user pid=22426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171312201.778:60905): login pid=22426 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171312201.780:60906): user pid=22427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171312201.780:60907): login pid=22427 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171312201.782:60908): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171312201.782:60909): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171312201.787:60910): user pid=22427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171312201.787:60911): user pid=22427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171312201.801:60912): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171312201.801:60913): user pid=22426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171312501.113:60914): user pid=22464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171312501.113:60915): login pid=22464 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171312501.117:60916): user pid=22464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171312501.117:60917): user pid=22464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171312801.447:60918): user pid=22498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171312801.447:60919): login pid=22498 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171312801.448:60920): user pid=22499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171312801.448:60921): login pid=22499 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171312801.450:60922): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171312801.450:60923): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171312801.453:60924): user pid=22499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171312801.453:60925): user pid=22499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171312801.479:60926): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171312801.479:60927): user pid=22498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171313101.777:60928): user pid=22537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171313101.777:60929): login pid=22537 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171313101.780:60930): user pid=22537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171313101.780:60931): user pid=22537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171313268.400:60932): avc:  denied  { search } for  pid=22571 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171313268.400:60932): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171313268.401:60933): avc:  denied  { create } for  pid=22571 comm="pyzor" name="L9QP8k" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313268.401:60933): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171313268.402:60934): avc:  denied  { getattr } for  pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313268.402:60934): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc6536de0 a2=7fffc6536de0 a3=2 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171313268.402:60934):  path="/tmp/L9QP8k"
>type=AVC msg=audit(1171313268.402:60935): avc:  denied  { write } for  pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313268.402:60935): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171313268.402:60935):  path="/tmp/L9QP8k"
>type=AVC msg=audit(1171313268.402:60936): avc:  denied  { unlink } for  pid=22571 comm="pyzor" name="L9QP8k" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313268.402:60936): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171313268.416:60937): avc:  denied  { read } for  pid=22571 comm="pyzor" name="tmp1deQmC" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313268.416:60937): arch=c000003e syscall=0 success=yes exit=2645 a0=4 a1=2aaaaf34d000 a2=1000 a3=1f1 items=0 ppid=6550 pid=22571 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171313268.416:60937):  path=2F746D702F746D70316465516D43202864656C6574656429
>type=AVC msg=audit(1171313273.505:60938): avc:  denied  { write } for  pid=22567 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171313273.505:60938): avc:  denied  { add_name } for  pid=22567 comm="procmail" name="_ngF.5JN0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171313273.505:60938): arch=c000003e syscall=2 success=yes exit=6 a0=61f9b0 a1=c1 a2=124 a3=61f9b0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171313273.505:60939): avc:  denied  { remove_name } for  pid=22567 comm="procmail" name="_ngF.5JN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171313273.505:60939): arch=c000003e syscall=87 success=yes exit=0 a0=61f9b0 a1=61b510 a2=7fffe49822a0 a3=61f9b0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171313273.506:60940): avc:  denied  { append } for  pid=22567 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171313273.506:60940): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22562 pid=22567 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171313401.114:60941): user pid=22583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171313401.114:60942): login pid=22583 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171313401.116:60943): user pid=22584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171313401.116:60944): login pid=22584 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171313401.120:60945): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171313401.120:60946): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171313401.123:60947): user pid=22584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171313401.124:60948): user pid=22584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171313401.143:60949): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171313401.143:60950): user pid=22583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171313701.451:60951): user pid=22621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171313701.452:60952): login pid=22621 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171313701.454:60953): user pid=22621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171313701.454:60954): user pid=22621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171314001.779:60955): user pid=22658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314001.779:60956): login pid=22658 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171314001.781:60957): user pid=22659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314001.782:60958): login pid=22659 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171314001.782:60959): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314001.782:60960): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171314001.787:60961): user pid=22659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314001.787:60962): user pid=22659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171314001.802:60963): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171314001.802:60964): user pid=22658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171314061.110:60965): user pid=22673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314061.110:60966): login pid=22673 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171314061.113:60967): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314061.114:60968): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171314062.027:60969): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171314062.027:60970): user pid=22673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171314301.034:60971): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314301.035:60972): login pid=22710 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171314301.038:60973): user pid=22710 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314301.038:60974): user pid=22710 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171314601.376:60975): user pid=22745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314601.377:60976): login pid=22745 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171314601.379:60977): user pid=22746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314601.379:60978): login pid=22746 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171314601.380:60979): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314601.381:60980): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171314601.384:60981): user pid=22746 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314601.384:60982): user pid=22746 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171314601.400:60983): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171314601.400:60984): user pid=22745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171314665.119:60985): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314665.119:60985): arch=c000003e syscall=2 success=yes exit=12 a0=3394ab0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171314665.119:60986): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314665.119:60986): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171314665.119:60986):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171314665.127:60987): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314665.127:60987): arch=c000003e syscall=2 success=yes exit=9 a0=347de90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171314669.059:60988): avc:  denied  { getattr } for  pid=22775 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314669.059:60988): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2f488430 a2=7fff2f488430 a3=6c6280 items=0 ppid=6550 pid=22775 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171314669.059:60988):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171314669.059:60989): avc:  denied  { read } for  pid=22775 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314669.059:60989): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22775 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171314674.021:60990): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171314674.021:60990): arch=c000003e syscall=62 success=yes exit=0 a0=58f7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171314674.090:60991): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314674.090:60991): arch=c000003e syscall=86 success=yes exit=0 a0=32be020 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171314674.090:60992): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314674.090:60992): arch=c000003e syscall=87 success=yes exit=0 a0=32be020 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171314674.091:60993): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314674.091:60993): arch=c000003e syscall=2 success=yes exit=9 a0=327f1c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171314901.711:60994): user pid=22799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171314901.711:60995): login pid=22799 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171314901.714:60996): user pid=22799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171314901.714:60997): user pid=22799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171314929.215:60998): avc:  denied  { create } for  pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314929.215:60998): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171314929.216:60999): avc:  denied  { write } for  pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314929.216:60999): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171314929.216:60999):  path="/home/dhighley/_ikF.xjN0FB.douglas"
>type=AVC msg=audit(1171314929.216:61000): avc:  denied  { getattr } for  pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314929.216:61000): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff5774d140 a2=7fff5774d140 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171314929.216:61000):  path="/home/dhighley/_ikF.xjN0FB.douglas"
>type=AVC msg=audit(1171314929.216:61001): avc:  denied  { link } for  pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314929.216:61001): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff5774d060 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171314929.217:61002): avc:  denied  { unlink } for  pid=22818 comm="procmail" name="_ikF.xjN0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171314929.217:61002): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff5774d060 a3=61a500 items=0 ppid=22811 pid=22818 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171315201.037:61003): user pid=22849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171315201.037:61004): login pid=22849 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171315201.039:61005): user pid=22848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171315201.039:61006): login pid=22848 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171315201.044:61007): user pid=22849 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171315201.044:61008): user pid=22849 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171315201.047:61009): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171315201.047:61010): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171315201.069:61011): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171315201.070:61012): user pid=22848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171315218.992:61013): avc:  denied  { search } for  pid=22871 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171315218.992:61013): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315218.993:61014): avc:  denied  { create } for  pid=22871 comm="pyzor" name="_2bBgp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315218.993:61014): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315218.993:61015): avc:  denied  { getattr } for  pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315218.993:61015): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffdab82430 a2=7fffdab82430 a3=2 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315218.993:61015):  path="/tmp/_2bBgp"
>type=AVC msg=audit(1171315218.994:61016): avc:  denied  { write } for  pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315218.994:61016): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315218.994:61016):  path="/tmp/_2bBgp"
>type=AVC msg=audit(1171315218.994:61017): avc:  denied  { unlink } for  pid=22871 comm="pyzor" name="_2bBgp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315218.994:61017): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315219.025:61018): avc:  denied  { read } for  pid=22871 comm="pyzor" name="tmpf5PO-W" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315219.025:61018): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=25c4 items=0 ppid=6550 pid=22871 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315219.025:61018):  path=2F746D702F746D706635504F2D57202864656C6574656429
>type=AVC msg=audit(1171315221.045:61019): avc:  denied  { append } for  pid=22867 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315221.045:61019): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22862 pid=22867 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171315230.444:61020): avc:  denied  { getattr } for  pid=22881 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315230.444:61020): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff62aeaa90 a2=7fff62aeaa90 a3=6c6280 items=0 ppid=6550 pid=22881 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315230.444:61020):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171315230.444:61021): avc:  denied  { read } for  pid=22881 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315230.444:61021): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22881 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315235.507:61022): avc:  denied  { append } for  pid=22877 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315235.507:61022): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22872 pid=22877 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171315235.508:61023): avc:  denied  { lock } for  pid=22877 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315235.508:61023): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=22872 pid=22877 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315235.508:61023):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171315351.292:61024): avc:  denied  { search } for  pid=22903 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171315351.292:61024): avc:  denied  { write } for  pid=22903 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171315351.292:61024): avc:  denied  { add_name } for  pid=22903 comm="pyzor" name="Ho4c9W" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171315351.292:61024): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=22903 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315351.292:61025): avc:  denied  { remove_name } for  pid=22903 comm="pyzor" name="Ho4c9W" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171315351.292:61025): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=22903 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171315501.368:61026): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171315501.369:61027): login pid=22917 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171315501.372:61028): user pid=22917 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171315501.372:61029): user pid=22917 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171315725.803:61030): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315725.803:61030): arch=c000003e syscall=2 success=yes exit=12 a0=33ed060 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171315725.804:61031): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315725.804:61031): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315725.804:61031):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171315725.813:61032): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315725.813:61032): arch=c000003e syscall=2 success=yes exit=9 a0=33376a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171315726.472:61033): avc:  denied  { getattr } for  pid=22972 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315726.472:61033): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffcc8c1870 a2=7fffcc8c1870 a3=6c6280 items=0 ppid=6550 pid=22972 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171315726.472:61033):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171315726.472:61034): avc:  denied  { read } for  pid=22972 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315726.472:61034): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=22972 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171315731.435:61035): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171315731.435:61035): arch=c000003e syscall=62 success=yes exit=0 a0=59bc a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171315731.504:61036): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315731.504:61036): arch=c000003e syscall=86 success=yes exit=0 a0=3624c50 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171315731.505:61037): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315731.505:61037): arch=c000003e syscall=87 success=yes exit=0 a0=3624c50 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171315731.505:61038): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171315731.505:61038): arch=c000003e syscall=2 success=yes exit=9 a0=308ff60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171315801.697:61039): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171315801.698:61040): login pid=22979 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171315801.700:61041): user pid=22980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171315801.700:61042): login pid=22980 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171315801.701:61043): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171315801.701:61044): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171315801.705:61045): user pid=22980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171315801.705:61046): user pid=22980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171315801.726:61047): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171315801.726:61048): user pid=22979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171316101.046:61049): user pid=23018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171316101.046:61050): login pid=23018 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171316101.049:61051): user pid=23018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171316101.049:61052): user pid=23018 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171316401.381:61053): user pid=23050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171316401.381:61054): login pid=23050 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171316401.382:61055): user pid=23051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171316401.382:61056): login pid=23051 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171316401.385:61057): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171316401.385:61058): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171316401.387:61059): user pid=23051 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171316401.387:61060): user pid=23051 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171316401.407:61061): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171316401.407:61062): user pid=23050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171316701.722:61063): user pid=23090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171316701.723:61064): login pid=23090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171316701.727:61065): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171316701.727:61066): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171317001.055:61067): user pid=23144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317001.055:61068): login pid=23144 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171317001.056:61069): user pid=23145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317001.056:61070): login pid=23145 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171317001.061:61071): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317001.061:61072): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171317001.066:61073): user pid=23145 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317001.067:61074): user pid=23145 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171317001.087:61075): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171317001.087:61076): user pid=23144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171317301.409:61077): user pid=23182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317301.410:61078): login pid=23182 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171317301.413:61079): user pid=23182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317301.413:61080): user pid=23182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171317381.803:61081): avc:  denied  { search } for  pid=23212 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171317381.803:61081): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171317381.804:61082): avc:  denied  { create } for  pid=23212 comm="pyzor" name="iEWofK" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317381.804:61082): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171317381.804:61083): avc:  denied  { getattr } for  pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317381.804:61083): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffe4e7d90 a2=7ffffe4e7d90 a3=2 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317381.804:61083):  path="/tmp/iEWofK"
>type=AVC msg=audit(1171317381.804:61084): avc:  denied  { write } for  pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317381.804:61084): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317381.804:61084):  path="/tmp/iEWofK"
>type=AVC msg=audit(1171317381.804:61085): avc:  denied  { unlink } for  pid=23212 comm="pyzor" name="iEWofK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317381.804:61085): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171317381.807:61086): avc:  denied  { read } for  pid=23212 comm="pyzor" name="tmpmEiZ3q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317381.807:61086): arch=c000003e syscall=0 success=yes exit=828 a0=4 a1=2aaaaf34d000 a2=1000 a3=af items=0 ppid=6550 pid=23212 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317381.807:61086):  path=2F746D702F746D706D45695A3371202864656C6574656429
>type=AVC msg=audit(1171317387.103:61087): avc:  denied  { write } for  pid=23208 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171317387.103:61087): avc:  denied  { add_name } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171317387.103:61087): avc:  denied  { create } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317387.103:61087): arch=c000003e syscall=2 success=yes exit=6 a0=622320 a1=c1 a2=124 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171317387.103:61088): avc:  denied  { write } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317387.103:61088): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317387.103:61088):  path="/home/dhighley/_oqF.LKO0FB.douglas"
>type=AVC msg=audit(1171317387.103:61089): avc:  denied  { getattr } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317387.103:61089): arch=c000003e syscall=4 success=yes exit=0 a0=622320 a1=7fff87653050 a2=7fff87653050 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317387.103:61089):  path="/home/dhighley/_oqF.LKO0FB.douglas"
>type=AVC msg=audit(1171317387.104:61090): avc:  denied  { link } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317387.104:61090): arch=c000003e syscall=86 success=yes exit=0 a0=622320 a1=61b520 a2=7fff87652f70 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171317387.104:61091): avc:  denied  { remove_name } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171317387.104:61091): avc:  denied  { unlink } for  pid=23208 comm="procmail" name="_oqF.LKO0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317387.104:61091): arch=c000003e syscall=87 success=yes exit=0 a0=622320 a1=61b520 a2=7fff87652f70 a3=622320 items=0 ppid=23199 pid=23208 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171317565.079:61092): avc:  denied  { getattr } for  pid=23247 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317565.079:61092): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff24053b0 a2=7ffff24053b0 a3=6c6280 items=0 ppid=6550 pid=23247 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171317565.079:61092):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171317565.079:61093): avc:  denied  { read } for  pid=23247 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171317565.079:61093): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23247 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171317601.732:61094): user pid=23252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317601.732:61095): login pid=23252 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171317601.734:61096): user pid=23253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317601.734:61097): login pid=23253 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171317601.736:61098): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317601.736:61099): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171317601.739:61100): user pid=23253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317601.739:61101): user pid=23253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171317601.758:61102): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171317601.758:61103): user pid=23252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171317661.075:61104): user pid=23268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317661.075:61105): login pid=23268 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171317661.079:61106): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317661.079:61107): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171317661.960:61108): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171317661.961:61109): user pid=23268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171317889.819:61110): avc:  denied  { search } for  pid=23316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171317889.819:61110): avc:  denied  { write } for  pid=23316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171317889.819:61110): avc:  denied  { add_name } for  pid=23316 comm="pyzor" name="D2vhCm" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171317889.819:61110): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=23316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171317889.819:61111): avc:  denied  { remove_name } for  pid=23316 comm="pyzor" name="D2vhCm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171317889.819:61111): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171317901.969:61112): user pid=23319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171317901.969:61113): login pid=23319 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171317901.973:61114): user pid=23319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171317901.973:61115): user pid=23319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171318048.828:61116): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318048.828:61116): arch=c000003e syscall=2 success=yes exit=9 a0=3386330 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171318049.531:61117): avc:  denied  { getattr } for  pid=23351 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318049.531:61117): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8f7026a0 a2=7fff8f7026a0 a3=6c6280 items=0 ppid=6550 pid=23351 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171318049.531:61117):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171318049.531:61118): avc:  denied  { read } for  pid=23351 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318049.531:61118): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23351 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171318052.035:61119): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318052.035:61119): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171318052.035:61119):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171318052.036:61120): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318052.036:61120): arch=c000003e syscall=86 success=yes exit=0 a0=309c4b0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171318052.036:61121): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318052.036:61121): arch=c000003e syscall=87 success=yes exit=0 a0=309c4b0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171318052.037:61122): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318052.037:61122): arch=c000003e syscall=2 success=yes exit=9 a0=2da3630 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171318201.305:61123): user pid=23365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171318201.305:61124): login pid=23365 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171318201.307:61125): user pid=23364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171318201.307:61126): login pid=23364 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171318201.312:61127): user pid=23365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171318201.312:61128): user pid=23365 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171318201.315:61129): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171318201.315:61130): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171318201.337:61131): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171318201.338:61132): user pid=23364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171318205.131:61133): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318205.131:61133): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171318205.131:61134): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318205.131:61134): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171318205.365:61135): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171318205.365:61135): arch=c000003e syscall=1 success=yes exit=3576 a0=9 a1=34e6aa0 a2=df8 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171318205.365:61135):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=CRED_DISP msg=audit(1171318387.951:61136): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171318387.951:61137): user pid=22190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171318501.956:61138): user pid=23412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171318501.956:61139): login pid=23412 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171318501.960:61140): user pid=23412 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171318501.960:61141): user pid=23412 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171318801.283:61142): user pid=23444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171318801.284:61143): login pid=23444 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171318801.286:61144): user pid=23445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171318801.286:61145): login pid=23445 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171318801.287:61146): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171318801.287:61147): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171318801.291:61148): user pid=23445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171318801.291:61149): user pid=23445 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171318801.307:61150): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171318801.307:61151): user pid=23444 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171319101.626:61152): user pid=23479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171319101.626:61153): login pid=23479 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171319101.629:61154): user pid=23479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171319101.629:61155): user pid=23479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171319350.138:61156): avc:  denied  { search } for  pid=23519 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171319350.138:61156): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23519 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171319401.957:61157): user pid=23526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171319401.957:61158): login pid=23526 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171319401.959:61159): user pid=23527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171319401.959:61160): login pid=23527 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171319401.962:61161): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171319401.962:61162): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171319401.968:61163): user pid=23527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171319401.968:61164): user pid=23527 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171319401.988:61165): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171319401.989:61166): user pid=23526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171319701.303:61167): user pid=23567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171319701.303:61168): login pid=23567 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171319701.306:61169): user pid=23567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171319701.306:61170): user pid=23567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171319730.970:61171): avc:  denied  { search } for  pid=23587 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171319730.970:61171): avc:  denied  { write } for  pid=23587 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171319730.970:61171): avc:  denied  { add_name } for  pid=23587 comm="pyzor" name="f-hSC2" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171319730.970:61171): avc:  denied  { create } for  pid=23587 comm="pyzor" name="f-hSC2" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171319730.970:61171): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171319730.970:61172): avc:  denied  { getattr } for  pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171319730.970:61172): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff33c334e0 a2=7fff33c334e0 a3=2 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171319730.970:61172):  path="/tmp/f-hSC2"
>type=AVC msg=audit(1171319730.971:61173): avc:  denied  { write } for  pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171319730.971:61173): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171319730.971:61173):  path="/tmp/f-hSC2"
>type=AVC msg=audit(1171319730.971:61174): avc:  denied  { remove_name } for  pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171319730.971:61174): avc:  denied  { unlink } for  pid=23587 comm="pyzor" name="f-hSC2" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171319730.971:61174): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171319730.972:61175): avc:  denied  { read } for  pid=23587 comm="pyzor" name="tmpZSEWp-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171319730.972:61175): arch=c000003e syscall=0 success=yes exit=824 a0=4 a1=2aaaaf34d000 a2=1000 a3=b1 items=0 ppid=6550 pid=23587 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171319730.972:61175):  path=2F746D702F746D705A534557702D202864656C6574656429
>type=USER_ACCT msg=audit(1171320001.629:61176): user pid=23613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320001.629:61177): login pid=23613 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171320001.632:61178): user pid=23614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320001.632:61179): login pid=23614 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171320001.633:61180): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320001.633:61181): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171320001.639:61182): user pid=23614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320001.640:61183): user pid=23614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171320001.651:61184): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171320001.652:61185): user pid=23613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171320301.971:61186): user pid=23651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320301.972:61187): login pid=23651 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171320301.975:61188): user pid=23651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320301.975:61189): user pid=23651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171320601.310:61190): user pid=23684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320601.311:61191): login pid=23684 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171320601.313:61192): user pid=23685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320601.313:61193): login pid=23685 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171320601.315:61194): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320601.315:61195): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171320601.325:61196): user pid=23685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320601.325:61197): user pid=23685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171320601.335:61198): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171320601.336:61199): user pid=23684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171320832.804:61200): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320832.804:61200): arch=c000003e syscall=2 success=yes exit=12 a0=34700e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171320832.804:61201): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320832.804:61201): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171320832.804:61201):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171320832.823:61202): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320832.823:61202): arch=c000003e syscall=2 success=yes exit=9 a0=3236e00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171320833.607:61203): avc:  denied  { getattr } for  pid=23724 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.607:61203): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffd6d7680 a2=7ffffd6d7680 a3=6c6280 items=0 ppid=6550 pid=23724 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171320833.607:61203):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171320833.607:61204): avc:  denied  { read } for  pid=23724 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.607:61204): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23724 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171320833.887:61205): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.887:61205): arch=c000003e syscall=86 success=yes exit=0 a0=354d530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171320833.887:61206): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.887:61206): arch=c000003e syscall=87 success=yes exit=0 a0=354d530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171320833.888:61207): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.888:61207): arch=c000003e syscall=2 success=yes exit=9 a0=33ba220 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171320833.904:61208): avc:  denied  { write } for  pid=23720 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171320833.904:61208): avc:  denied  { add_name } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171320833.904:61208): avc:  denied  { create } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.904:61208): arch=c000003e syscall=2 success=yes exit=6 a0=623a50 a1=c1 a2=124 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171320833.905:61209): avc:  denied  { write } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.905:61209): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171320833.905:61209):  path="/home/dhighley/_oyF.BAP0FB.douglas"
>type=AVC msg=audit(1171320833.905:61210): avc:  denied  { getattr } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.905:61210): arch=c000003e syscall=4 success=yes exit=0 a0=623a50 a1=7fff2d6d80d0 a2=7fff2d6d80d0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171320833.905:61210):  path="/home/dhighley/_oyF.BAP0FB.douglas"
>type=AVC msg=audit(1171320833.905:61211): avc:  denied  { link } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.905:61211): arch=c000003e syscall=86 success=yes exit=0 a0=623a50 a1=61b520 a2=7fff2d6d7ff0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171320833.905:61212): avc:  denied  { remove_name } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171320833.905:61212): avc:  denied  { unlink } for  pid=23720 comm="procmail" name="_oyF.BAP0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.905:61212): arch=c000003e syscall=87 success=yes exit=0 a0=623a50 a1=61b520 a2=7fff2d6d7ff0 a3=623a50 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171320833.905:61213): avc:  denied  { append } for  pid=23720 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171320833.905:61213): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=23715 pid=23720 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171320901.656:61214): user pid=23731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171320901.656:61215): login pid=23731 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171320901.659:61216): user pid=23731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171320901.659:61217): user pid=23731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171321201.982:61218): user pid=23767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321201.982:61219): login pid=23767 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171321201.984:61220): user pid=23768 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321201.984:61221): login pid=23768 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171321201.985:61222): user pid=23766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321201.985:61223): login pid=23766 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171321201.988:61224): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321201.988:61225): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171321201.991:61226): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321201.991:61227): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171321202.000:61228): user pid=23768 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321202.000:61229): user pid=23768 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171321202.019:61230): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171321202.020:61231): user pid=23766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171321261.322:61232): user pid=23787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321261.322:61233): login pid=23787 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171321261.326:61234): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321261.326:61235): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171321262.211:61236): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171321262.211:61237): user pid=23787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171321501.219:61238): user pid=23836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321501.219:61239): login pid=23836 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171321501.223:61240): user pid=23836 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321501.223:61241): user pid=23836 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171321724.992:61242): avc:  denied  { search } for  pid=23873 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171321724.992:61242): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=23873 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171321729.954:61243): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171321729.954:61243): arch=c000003e syscall=62 success=yes exit=0 a0=5d41 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171321801.546:61244): user pid=23880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321801.546:61245): login pid=23880 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171321801.548:61246): user pid=23881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171321801.548:61247): login pid=23881 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171321801.550:61248): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321801.550:61249): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171321801.555:61250): user pid=23881 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171321801.555:61251): user pid=23881 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171321801.568:61252): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171321801.568:61253): user pid=23880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171322101.882:61254): user pid=23918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171322101.882:61255): login pid=23918 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171322101.885:61256): user pid=23918 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171322101.885:61257): user pid=23918 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171322401.222:61258): user pid=23951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171322401.222:61259): login pid=23951 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171322401.224:61260): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171322401.224:61261): login pid=23950 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171322401.226:61262): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171322401.226:61263): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171322401.229:61264): user pid=23951 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171322401.229:61265): user pid=23951 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171322401.256:61266): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171322401.256:61267): user pid=23950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171322701.565:61268): user pid=23986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171322701.565:61269): login pid=23986 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171322701.569:61270): user pid=23986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171322701.569:61271): user pid=23986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171323001.889:61272): user pid=24022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323001.889:61273): login pid=24022 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171323001.891:61274): user pid=24023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323001.892:61275): login pid=24023 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171323001.892:61276): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323001.892:61277): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171323001.903:61278): user pid=24023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323001.903:61279): user pid=24023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171323001.911:61280): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171323001.911:61281): user pid=24022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171323301.242:61282): user pid=24057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323301.243:61283): login pid=24057 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171323301.246:61284): user pid=24057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323301.247:61285): user pid=24057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171323601.567:61286): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323601.568:61287): login pid=24089 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171323601.570:61288): user pid=24090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323601.570:61289): login pid=24090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171323601.571:61290): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323601.572:61291): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171323601.575:61292): user pid=24090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323601.575:61293): user pid=24090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171323601.591:61294): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171323601.591:61295): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171323901.908:61296): user pid=24127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171323901.908:61297): login pid=24127 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171323901.911:61298): user pid=24127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171323901.911:61299): user pid=24127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171324201.232:61300): user pid=24161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324201.232:61301): login pid=24161 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171324201.233:61302): user pid=24160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324201.234:61303): login pid=24160 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171324201.236:61304): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324201.236:61305): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171324201.241:61306): user pid=24161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324201.241:61307): user pid=24161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171324201.254:61308): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171324201.254:61309): user pid=24160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171324501.581:61310): user pid=24197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324501.581:61311): login pid=24197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171324501.585:61312): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324501.585:61313): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171324776.235:61314): avc:  denied  { search } for  pid=24237 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171324776.235:61314): avc:  denied  { write } for  pid=24237 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171324776.235:61314): avc:  denied  { add_name } for  pid=24237 comm="pyzor" name="j7yBQu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171324776.235:61314): avc:  denied  { create } for  pid=24237 comm="pyzor" name="j7yBQu" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171324776.235:61314): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171324776.236:61315): avc:  denied  { getattr } for  pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171324776.236:61315): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff466cb5d0 a2=7fff466cb5d0 a3=2 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171324776.236:61315):  path="/tmp/j7yBQu"
>type=AVC msg=audit(1171324776.236:61316): avc:  denied  { write } for  pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171324776.236:61316): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171324776.236:61316):  path="/tmp/j7yBQu"
>type=AVC msg=audit(1171324776.236:61317): avc:  denied  { remove_name } for  pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171324776.236:61317): avc:  denied  { unlink } for  pid=24237 comm="pyzor" name="j7yBQu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171324776.236:61317): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171324776.241:61318): avc:  denied  { read } for  pid=24237 comm="pyzor" name="tmp4dawcp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171324776.241:61318): arch=c000003e syscall=0 success=yes exit=996 a0=4 a1=2aaaaf34d000 a2=1000 a3=89 items=0 ppid=6550 pid=24237 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171324776.241:61318):  path=2F746D702F746D70346461776370202864656C6574656429
>type=USER_ACCT msg=audit(1171324801.910:61319): user pid=24243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324801.910:61320): login pid=24243 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171324801.912:61321): user pid=24244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324801.913:61322): login pid=24244 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171324801.916:61323): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324801.916:61324): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171324801.918:61325): user pid=24244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324801.918:61326): user pid=24244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171324801.937:61327): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171324801.937:61328): user pid=24243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171324861.245:61329): user pid=24259 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171324861.245:61330): login pid=24259 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171324861.248:61331): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171324861.248:61332): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171324862.131:61333): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171324862.132:61334): user pid=24259 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171325101.138:61335): user pid=24294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171325101.139:61336): login pid=24294 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171325101.141:61337): user pid=24294 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171325101.142:61338): user pid=24294 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171325401.464:61339): user pid=24330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171325401.464:61340): login pid=24330 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171325401.466:61341): user pid=24331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171325401.466:61342): login pid=24331 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171325401.468:61343): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171325401.468:61344): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171325401.471:61345): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171325401.471:61346): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171325401.488:61347): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171325401.488:61348): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171325701.800:61349): user pid=24366 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171325701.800:61350): login pid=24366 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171325701.804:61351): user pid=24366 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171325701.804:61352): user pid=24366 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171326001.123:61353): user pid=24400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326001.123:61354): login pid=24400 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171326001.124:61355): user pid=24401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326001.125:61356): login pid=24401 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171326001.129:61357): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326001.129:61358): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171326001.131:61359): user pid=24401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326001.131:61360): user pid=24401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171326001.149:61361): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171326001.149:61362): user pid=24400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171326301.469:61363): user pid=24437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326301.470:61364): login pid=24437 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171326301.473:61365): user pid=24437 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326301.473:61366): user pid=24437 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171326601.811:61367): user pid=24475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326601.811:61368): login pid=24475 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171326601.813:61369): user pid=24476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326601.813:61370): login pid=24476 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171326601.815:61371): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326601.815:61372): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171326601.820:61373): user pid=24476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326601.820:61374): user pid=24476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171326601.838:61375): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171326601.838:61376): user pid=24475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171326737.356:61377): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326737.356:61377): arch=c000003e syscall=2 success=yes exit=12 a0=34b5e40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171326737.356:61378): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326737.356:61378): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171326737.356:61378):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171326737.982:61379): avc:  denied  { getattr } for  pid=24507 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326737.982:61379): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8d056000 a2=7fff8d056000 a3=6c6280 items=0 ppid=6550 pid=24507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171326737.982:61379):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171326737.982:61380): avc:  denied  { read } for  pid=24507 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326737.982:61380): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=24507 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171326741.893:61381): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326741.893:61381): arch=c000003e syscall=86 success=yes exit=0 a0=33d49f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171326741.893:61382): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171326741.893:61382): arch=c000003e syscall=87 success=yes exit=0 a0=33d49f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171326901.154:61383): user pid=24530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171326901.154:61384): login pid=24530 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171326901.158:61385): user pid=24530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171326901.158:61386): user pid=24530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171326903.588:61387): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171326903.588:61387): arch=c000003e syscall=62 success=yes exit=0 a0=5fd1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171327201.485:61388): user pid=24566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171327201.485:61389): login pid=24566 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171327201.486:61390): user pid=24567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171327201.486:61391): login pid=24567 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171327201.491:61392): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171327201.491:61393): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171327201.497:61394): user pid=24567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171327201.497:61395): user pid=24567 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171327201.513:61396): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171327201.513:61397): user pid=24566 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171327501.828:61398): user pid=24604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171327501.828:61399): login pid=24604 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171327501.832:61400): user pid=24604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171327501.832:61401): user pid=24604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171327608.832:61402): avc:  denied  { search } for  pid=24630 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171327608.832:61402): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171327608.833:61403): avc:  denied  { create } for  pid=24630 comm="pyzor" name="HWRc32" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327608.833:61403): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171327608.833:61404): avc:  denied  { getattr } for  pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327608.833:61404): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa0446260 a2=7fffa0446260 a3=3 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171327608.833:61404):  path="/tmp/HWRc32"
>type=AVC msg=audit(1171327608.834:61405): avc:  denied  { write } for  pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327608.834:61405): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171327608.834:61405):  path="/tmp/HWRc32"
>type=AVC msg=audit(1171327608.834:61406): avc:  denied  { unlink } for  pid=24630 comm="pyzor" name="HWRc32" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327608.834:61406): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171327608.835:61407): avc:  denied  { read } for  pid=24630 comm="pyzor" name="tmpxUJttc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327608.835:61407): arch=c000003e syscall=0 success=yes exit=2581 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=24630 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171327608.835:61407):  path=2F746D702F746D7078554A747463202864656C6574656429
>type=AVC msg=audit(1171327613.819:61408): avc:  denied  { write } for  pid=24626 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171327613.819:61408): avc:  denied  { add_name } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171327613.819:61408): avc:  denied  { create } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.819:61408): arch=c000003e syscall=2 success=yes exit=6 a0=61ff70 a1=c1 a2=124 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171327613.819:61409): avc:  denied  { write } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.819:61409): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171327613.819:61409):  path="/home/dhighley/_yAG.9pQ0FB.douglas"
>type=AVC msg=audit(1171327613.820:61410): avc:  denied  { getattr } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.820:61410): arch=c000003e syscall=4 success=yes exit=0 a0=61ff70 a1=7fff35ced6e0 a2=7fff35ced6e0 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171327613.820:61410):  path="/home/dhighley/_yAG.9pQ0FB.douglas"
>type=AVC msg=audit(1171327613.820:61411): avc:  denied  { link } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.820:61411): arch=c000003e syscall=86 success=yes exit=0 a0=61ff70 a1=61ff50 a2=7fff35ced600 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171327613.820:61412): avc:  denied  { remove_name } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171327613.820:61412): avc:  denied  { unlink } for  pid=24626 comm="procmail" name="_yAG.9pQ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.820:61412): arch=c000003e syscall=87 success=yes exit=0 a0=61ff70 a1=61ff50 a2=7fff35ced600 a3=61ff70 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171327613.820:61413): avc:  denied  { append } for  pid=24626 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171327613.820:61413): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=24621 pid=24626 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171327801.154:61414): user pid=24649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171327801.154:61415): login pid=24649 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171327801.156:61416): user pid=24650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171327801.156:61417): login pid=24650 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171327801.158:61418): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171327801.158:61419): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171327801.161:61420): user pid=24650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171327801.161:61421): user pid=24650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171327801.178:61422): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171327801.178:61423): user pid=24649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171328101.497:61424): user pid=24688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171328101.497:61425): login pid=24688 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171328101.499:61426): user pid=24688 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171328101.499:61427): user pid=24688 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171328401.828:61428): user pid=24722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171328401.828:61429): login pid=24722 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171328401.830:61430): user pid=24723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171328401.831:61431): login pid=24723 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171328401.832:61432): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171328401.832:61433): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171328401.838:61434): user pid=24723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171328401.838:61435): user pid=24723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171328401.851:61436): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171328401.851:61437): user pid=24722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171328461.171:61438): user pid=24739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171328461.171:61439): login pid=24739 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171328461.175:61440): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171328461.175:61441): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171328462.090:61442): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171328462.091:61443): user pid=24739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171328701.100:61444): user pid=24774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171328701.101:61445): login pid=24774 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171328701.105:61446): user pid=24774 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171328701.105:61447): user pid=24774 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171329001.428:61448): user pid=24808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329001.429:61449): login pid=24808 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171329001.430:61450): user pid=24809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329001.430:61451): login pid=24809 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171329001.435:61452): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329001.435:61453): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171329001.441:61454): user pid=24809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329001.441:61455): user pid=24809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171329001.455:61456): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171329001.455:61457): user pid=24808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171329188.061:61458): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171329188.061:61459): user pid=23767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171329301.066:61460): user pid=24845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329301.067:61461): login pid=24845 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171329301.071:61462): user pid=24845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329301.071:61463): user pid=24845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171329601.404:61464): user pid=24879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329601.404:61465): login pid=24879 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171329601.405:61466): user pid=24880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329601.405:61467): login pid=24880 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171329601.410:61468): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329601.410:61469): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171329601.415:61470): user pid=24880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329601.415:61471): user pid=24880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171329601.427:61472): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171329601.428:61473): user pid=24879 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171329901.742:61474): user pid=24915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171329901.743:61475): login pid=24915 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171329901.745:61476): user pid=24915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171329901.746:61477): user pid=24915 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171330201.079:61478): user pid=24951 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171330201.079:61479): login pid=24951 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171330201.081:61480): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171330201.081:61481): login pid=24952 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171330201.082:61482): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171330201.082:61483): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171330201.086:61484): user pid=24952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171330201.086:61485): user pid=24952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171330201.101:61486): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171330201.102:61487): user pid=24951 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171330501.413:61488): user pid=24988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171330501.413:61489): login pid=24988 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171330501.416:61490): user pid=24988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171330501.416:61491): user pid=24988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171330801.735:61492): user pid=25022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171330801.735:61493): login pid=25022 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171330801.737:61494): user pid=25023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171330801.738:61495): login pid=25023 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171330801.739:61496): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171330801.739:61497): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171330801.745:61498): user pid=25023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171330801.745:61499): user pid=25023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171330801.759:61500): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171330801.760:61501): user pid=25022 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171331101.074:61502): user pid=25064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171331101.075:61503): login pid=25064 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171331101.079:61504): user pid=25064 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171331101.079:61505): user pid=25064 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171331382.430:61506): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331382.430:61506): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171331382.430:61506):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171331382.430:61507): avc:  denied  { link } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331382.430:61507): arch=c000003e syscall=86 success=yes exit=0 a0=3290640 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171331382.431:61508): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331382.431:61508): arch=c000003e syscall=87 success=yes exit=0 a0=3290640 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171331382.433:61509): avc:  denied  { setattr } for  pid=6550 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331382.433:61509): arch=c000003e syscall=132 success=yes exit=0 a0=3135dd0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171331382.433:61510): avc:  denied  { rename } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331382.433:61510): arch=c000003e syscall=82 success=yes exit=0 a0=305a140 a1=30e2e50 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171331389.035:61511): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331389.035:61511): arch=c000003e syscall=1 success=yes exit=1440 a0=a a1=354cfd0 a2=5a0 a3=11 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171331389.035:61511):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171331389.689:61512): avc:  denied  { getattr } for  pid=25105 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331389.689:61512): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff021250d0 a2=7fff021250d0 a3=6c6280 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171331389.689:61512):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171331389.689:61513): avc:  denied  { read } for  pid=25105 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331389.689:61513): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171331389.690:61514): avc:  denied  { search } for  pid=25105 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171331389.690:61514): avc:  denied  { write } for  pid=25105 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171331389.690:61514): avc:  denied  { add_name } for  pid=25105 comm="pyzor" name="rKIrn0" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171331389.690:61514): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171331389.691:61515): avc:  denied  { remove_name } for  pid=25105 comm="pyzor" name="rKIrn0" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171331389.691:61515): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25105 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171331394.652:61516): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171331394.652:61516): arch=c000003e syscall=62 success=yes exit=0 a0=6211 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171331394.820:61517): avc:  denied  { write } for  pid=25100 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171331394.820:61517): avc:  denied  { add_name } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171331394.820:61517): avc:  denied  { create } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331394.820:61517): arch=c000003e syscall=2 success=yes exit=6 a0=61cc00 a1=c1 a2=124 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171331394.820:61518): avc:  denied  { write } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331394.820:61518): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171331394.820:61518):  path="/home/dhighley/_MIG.ClR0FB.douglas"
>type=AVC msg=audit(1171331394.821:61519): avc:  denied  { getattr } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331394.821:61519): arch=c000003e syscall=4 success=yes exit=0 a0=61cc00 a1=7fff9ae33050 a2=7fff9ae33050 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171331394.821:61519):  path="/home/dhighley/_MIG.ClR0FB.douglas"
>type=AVC msg=audit(1171331394.821:61520): avc:  denied  { link } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331394.821:61520): arch=c000003e syscall=86 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff9ae32f70 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171331394.821:61521): avc:  denied  { remove_name } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171331394.821:61521): avc:  denied  { unlink } for  pid=25100 comm="procmail" name="_MIG.ClR0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171331394.821:61521): arch=c000003e syscall=87 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff9ae32f70 a3=61cc00 items=0 ppid=25095 pid=25100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171331401.402:61522): user pid=25108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171331401.402:61523): login pid=25108 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171331401.405:61524): user pid=25109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171331401.405:61525): login pid=25109 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171331401.407:61526): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171331401.407:61527): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171331401.412:61528): user pid=25109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171331401.412:61529): user pid=25109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171331401.427:61530): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171331401.428:61531): user pid=25108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171331701.738:61532): user pid=25150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171331701.739:61533): login pid=25150 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171331701.741:61534): user pid=25150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171331701.742:61535): user pid=25150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171332001.077:61536): user pid=25186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332001.077:61537): login pid=25186 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171332001.079:61538): user pid=25187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332001.079:61539): login pid=25187 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171332001.081:61540): user pid=25188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332001.082:61541): login pid=25188 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171332001.082:61542): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332001.082:61543): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171332001.084:61544): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332001.084:61545): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171332001.101:61546): user pid=25188 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332001.101:61547): user pid=25188 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171332001.107:61548): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171332001.107:61549): user pid=25186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171332061.417:61550): user pid=25207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332061.417:61551): login pid=25207 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171332061.421:61552): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332061.421:61553): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171332062.338:61554): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171332062.339:61555): user pid=25207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171332301.345:61556): user pid=25242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332301.345:61557): login pid=25242 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171332301.350:61558): user pid=25242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332301.350:61559): user pid=25242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171332601.685:61560): user pid=25284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332601.685:61561): login pid=25284 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171332601.688:61562): user pid=25285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332601.688:61563): login pid=25285 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171332601.691:61564): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332601.691:61565): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171332601.693:61566): user pid=25285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332601.693:61567): user pid=25285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171332601.713:61568): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171332601.713:61569): user pid=25284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171332835.653:61570): avc:  denied  { search } for  pid=25326 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171332835.653:61570): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25326 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171332901.033:61571): user pid=25332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171332901.033:61572): login pid=25332 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171332901.035:61573): user pid=25332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171332901.035:61574): user pid=25332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171333201.362:61575): user pid=25367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171333201.362:61576): login pid=25367 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171333201.365:61577): user pid=25368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171333201.365:61578): login pid=25368 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171333201.368:61579): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171333201.368:61580): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171333201.370:61581): user pid=25368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171333201.370:61582): user pid=25368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171333201.393:61583): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171333201.393:61584): user pid=25367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171333501.708:61585): user pid=25407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171333501.708:61586): login pid=25407 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171333501.713:61587): user pid=25407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171333501.713:61588): user pid=25407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171333801.034:61589): user pid=25442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171333801.034:61590): login pid=25442 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171333801.036:61591): user pid=25443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171333801.037:61592): login pid=25443 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171333801.040:61593): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171333801.040:61594): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171333801.042:61595): user pid=25443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171333801.042:61596): user pid=25443 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171333801.063:61597): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171333801.063:61598): user pid=25442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171334101.375:61599): user pid=25479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171334101.375:61600): login pid=25479 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171334101.379:61601): user pid=25479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171334101.379:61602): user pid=25479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171334168.128:61603): avc:  denied  { search } for  pid=25504 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171334168.128:61603): avc:  denied  { write } for  pid=25504 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171334168.128:61603): avc:  denied  { add_name } for  pid=25504 comm="pyzor" name="HnUMH7" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171334168.128:61603): avc:  denied  { create } for  pid=25504 comm="pyzor" name="HnUMH7" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334168.128:61603): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171334168.129:61604): avc:  denied  { getattr } for  pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334168.129:61604): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff206efb90 a2=7fff206efb90 a3=3 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334168.129:61604):  path="/tmp/HnUMH7"
>type=AVC msg=audit(1171334168.129:61605): avc:  denied  { write } for  pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334168.129:61605): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334168.129:61605):  path="/tmp/HnUMH7"
>type=AVC msg=audit(1171334168.129:61606): avc:  denied  { remove_name } for  pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171334168.129:61606): avc:  denied  { unlink } for  pid=25504 comm="pyzor" name="HnUMH7" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334168.129:61606): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171334168.131:61607): avc:  denied  { read } for  pid=25504 comm="pyzor" name="tmpoVrAre" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334168.131:61607): arch=c000003e syscall=0 success=yes exit=1092 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=25504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334168.131:61607):  path=2F746D702F746D706F5672417265202864656C6574656429
>type=AVC msg=audit(1171334173.665:61608): avc:  denied  { write } for  pid=25500 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171334173.665:61608): avc:  denied  { add_name } for  pid=25500 comm="procmail" name="_cOG.dQS0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171334173.665:61608): arch=c000003e syscall=2 success=yes exit=6 a0=61ca90 a1=c1 a2=124 a3=61ca90 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171334173.666:61609): avc:  denied  { remove_name } for  pid=25500 comm="procmail" name="_cOG.dQS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171334173.666:61609): arch=c000003e syscall=87 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb6f79890 a3=61ca90 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171334173.666:61610): avc:  denied  { append } for  pid=25500 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334173.666:61610): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25495 pid=25500 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171334401.706:61611): user pid=25524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171334401.706:61612): login pid=25524 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171334401.708:61613): user pid=25525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171334401.708:61614): login pid=25525 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171334401.712:61615): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171334401.712:61616): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171334401.715:61617): user pid=25525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171334401.715:61618): user pid=25525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171334401.733:61619): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171334401.733:61620): user pid=25524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171334415.269:61621): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334415.269:61621): arch=c000003e syscall=2 success=yes exit=9 a0=347f590 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171334415.912:61622): avc:  denied  { getattr } for  pid=25545 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334415.912:61622): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7509f040 a2=7fff7509f040 a3=6c6280 items=0 ppid=6550 pid=25545 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334415.912:61622):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171334415.912:61623): avc:  denied  { read } for  pid=25545 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334415.912:61623): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25545 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171334420.875:61624): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171334420.875:61624): arch=c000003e syscall=62 success=yes exit=0 a0=63c9 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171334421.150:61625): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.150:61625): arch=c000003e syscall=2 success=yes exit=9 a0=31a18d0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171334421.162:61626): avc:  denied  { create } for  pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.162:61626): arch=c000003e syscall=2 success=yes exit=6 a0=61df60 a1=c1 a2=124 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171334421.162:61627): avc:  denied  { write } for  pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.162:61627): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334421.162:61627):  path="/home/dhighley/_FPG.VUS0FB.douglas"
>type=AVC msg=audit(1171334421.162:61628): avc:  denied  { getattr } for  pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.162:61628): arch=c000003e syscall=4 success=yes exit=0 a0=61df60 a1=7fff3aa76470 a2=7fff3aa76470 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334421.162:61628):  path="/home/dhighley/_FPG.VUS0FB.douglas"
>type=AVC msg=audit(1171334421.163:61629): avc:  denied  { link } for  pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.163:61629): arch=c000003e syscall=86 success=yes exit=0 a0=61df60 a1=61b510 a2=7fff3aa76390 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171334421.163:61630): avc:  denied  { unlink } for  pid=25541 comm="procmail" name="_FPG.VUS0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334421.163:61630): arch=c000003e syscall=87 success=yes exit=0 a0=61df60 a1=61b510 a2=7fff3aa76390 a3=61df60 items=0 ppid=25538 pid=25541 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171334699.925:61631): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334699.925:61631): arch=c000003e syscall=2 success=yes exit=12 a0=3346ae0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171334699.925:61632): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334699.925:61632): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171334699.925:61632):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=USER_ACCT msg=audit(1171334701.054:61633): user pid=25585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171334701.054:61634): login pid=25585 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171334701.057:61635): user pid=25585 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171334701.057:61636): user pid=25585 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171334705.489:61637): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334705.489:61637): arch=c000003e syscall=86 success=yes exit=0 a0=2fbd290 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171334705.489:61638): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171334705.489:61638): arch=c000003e syscall=87 success=yes exit=0 a0=2fbd290 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171335001.394:61639): user pid=25620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335001.395:61640): login pid=25620 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171335001.396:61641): user pid=25619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335001.396:61642): login pid=25619 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171335001.399:61643): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335001.399:61644): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171335001.404:61645): user pid=25620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335001.404:61646): user pid=25620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171335001.425:61647): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171335001.425:61648): user pid=25619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171335064.901:61649): avc:  denied  { getattr } for  pid=25645 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171335064.901:61649): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5c771720 a2=7fff5c771720 a3=6c6280 items=0 ppid=6550 pid=25645 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171335064.901:61649):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171335064.901:61650): avc:  denied  { read } for  pid=25645 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171335064.901:61650): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25645 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171335069.977:61651): avc:  denied  { append } for  pid=25641 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171335069.977:61651): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25636 pid=25641 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171335069.977:61652): avc:  denied  { lock } for  pid=25641 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171335069.977:61652): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=25636 pid=25641 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171335069.977:61652):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171335301.742:61653): user pid=25680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335301.742:61654): login pid=25680 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171335301.745:61655): user pid=25680 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335301.745:61656): user pid=25680 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171335601.065:61657): user pid=25722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335601.065:61658): login pid=25722 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171335601.067:61659): user pid=25723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335601.068:61660): login pid=25723 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171335601.071:61661): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335601.071:61662): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171335601.073:61663): user pid=25723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335601.073:61664): user pid=25723 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171335601.093:61665): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171335601.093:61666): user pid=25722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171335661.397:61667): user pid=25740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335661.398:61668): login pid=25740 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171335661.401:61669): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335661.401:61670): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171335662.314:61671): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171335662.314:61672): user pid=25740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171335901.321:61673): user pid=25781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171335901.321:61674): login pid=25781 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171335901.324:61675): user pid=25781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171335901.324:61676): user pid=25781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171336201.646:61677): user pid=25824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171336201.647:61678): login pid=25824 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171336201.648:61679): user pid=25825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171336201.648:61680): login pid=25825 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171336201.653:61681): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171336201.653:61682): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171336201.657:61683): user pid=25825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171336201.657:61684): user pid=25825 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171336201.683:61685): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171336201.683:61686): user pid=25824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171336501.985:61687): user pid=25861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171336501.985:61688): login pid=25861 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171336501.989:61689): user pid=25861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171336501.989:61690): user pid=25861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171336664.936:61691): avc:  denied  { search } for  pid=25893 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171336664.936:61691): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171336664.937:61692): avc:  denied  { search } for  pid=25893 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171336664.937:61692): avc:  denied  { write } for  pid=25893 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171336664.937:61692): avc:  denied  { add_name } for  pid=25893 comm="pyzor" name="n1cLM1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171336664.937:61692): avc:  denied  { create } for  pid=25893 comm="pyzor" name="n1cLM1" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336664.937:61692): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171336664.937:61693): avc:  denied  { getattr } for  pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336664.937:61693): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2145b8f0 a2=7fff2145b8f0 a3=3 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171336664.937:61693):  path="/tmp/n1cLM1"
>type=AVC msg=audit(1171336664.937:61694): avc:  denied  { write } for  pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336664.937:61694): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171336664.937:61694):  path="/tmp/n1cLM1"
>type=AVC msg=audit(1171336664.937:61695): avc:  denied  { remove_name } for  pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171336664.937:61695): avc:  denied  { unlink } for  pid=25893 comm="pyzor" name="n1cLM1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336664.937:61695): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171336664.939:61696): avc:  denied  { read } for  pid=25893 comm="pyzor" name="tmpS1-rTu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336664.939:61696): arch=c000003e syscall=0 success=yes exit=2143 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=6550 pid=25893 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171336664.939:61696):  path=2F746D702F746D7053312D725475202864656C6574656429
>type=AVC msg=audit(1171336668.517:61697): avc:  denied  { append } for  pid=25889 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336668.517:61697): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25884 pid=25889 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171336801.326:61698): user pid=25904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171336801.326:61699): login pid=25904 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171336801.329:61700): user pid=25905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171336801.329:61701): login pid=25905 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171336801.329:61702): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171336801.330:61703): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171336801.333:61704): user pid=25905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171336801.333:61705): user pid=25905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171336801.353:61706): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171336801.353:61707): user pid=25904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171336945.919:61708): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171336945.919:61708): arch=c000003e syscall=62 success=yes exit=0 a0=6550 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171336946.430:61709): avc:  denied  { write } for  pid=25932 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171336946.430:61709): avc:  denied  { add_name } for  pid=25932 comm="procmail" name="_MVG.y7S0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171336946.430:61709): arch=c000003e syscall=2 success=yes exit=6 a0=61b490 a1=c1 a2=124 a3=61b490 items=0 ppid=25927 pid=25932 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171336946.430:61710): avc:  denied  { remove_name } for  pid=25932 comm="procmail" name="_MVG.y7S0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171336946.430:61710): arch=c000003e syscall=87 success=yes exit=0 a0=61b490 a1=624060 a2=7fff3284fba0 a3=61b490 items=0 ppid=25927 pid=25932 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171336953.644:61711): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336953.644:61711): arch=c000003e syscall=2 success=yes exit=9 a0=35709d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171336954.164:61712): avc:  denied  { getattr } for  pid=25946 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336954.164:61712): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4d2081b0 a2=7fff4d2081b0 a3=6c6280 items=0 ppid=6550 pid=25946 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171336954.164:61712):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171336954.164:61713): avc:  denied  { read } for  pid=25946 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336954.164:61713): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=25946 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171336959.149:61714): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171336959.149:61714): arch=c000003e syscall=2 success=yes exit=9 a0=356e4e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171337101.667:61715): user pid=25974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171337101.667:61716): login pid=25974 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171337101.671:61717): user pid=25974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171337101.672:61718): user pid=25974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171337401.999:61719): user pid=26015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171337401.999:61720): login pid=26015 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171337402.002:61721): user pid=26016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171337402.002:61722): login pid=26016 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171337402.006:61723): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171337402.006:61724): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171337402.009:61725): user pid=26016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171337402.009:61726): user pid=26016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171337402.029:61727): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171337402.029:61728): user pid=26015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171337517.146:61729): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337517.146:61729): arch=c000003e syscall=2 success=yes exit=12 a0=34189e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171337517.146:61730): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337517.146:61730): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171337517.146:61730):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171337522.750:61731): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.750:61731): arch=c000003e syscall=86 success=yes exit=0 a0=31e80c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171337522.751:61732): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634226 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.751:61732): arch=c000003e syscall=87 success=yes exit=0 a0=31e80c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171337522.795:61733): avc:  denied  { create } for  pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.795:61733): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171337522.795:61734): avc:  denied  { write } for  pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.795:61734): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171337522.795:61734):  path="/home/dhighley/_7WG.yET0FB.douglas"
>type=AVC msg=audit(1171337522.795:61735): avc:  denied  { getattr } for  pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.795:61735): arch=c000003e syscall=4 success=yes exit=0 a0=61c980 a1=7fffab40fe10 a2=7fffab40fe10 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171337522.795:61735):  path="/home/dhighley/_7WG.yET0FB.douglas"
>type=AVC msg=audit(1171337522.795:61736): avc:  denied  { link } for  pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.795:61736): arch=c000003e syscall=86 success=yes exit=0 a0=61c980 a1=61b510 a2=7fffab40fd30 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171337522.796:61737): avc:  denied  { unlink } for  pid=26043 comm="procmail" name="_7WG.yET0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171337522.796:61737): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b510 a2=7fffab40fd30 a3=61c980 items=0 ppid=26038 pid=26043 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171337701.350:61738): user pid=26062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171337701.350:61739): login pid=26062 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171337701.354:61740): user pid=26062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171337701.354:61741): user pid=26062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171338001.679:61742): user pid=26098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338001.679:61743): login pid=26098 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171338001.680:61744): user pid=26099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338001.680:61745): login pid=26099 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171338001.685:61746): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338001.685:61747): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171338001.686:61748): user pid=26099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338001.688:61749): user pid=26099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171338001.715:61750): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171338001.715:61751): user pid=26098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171338301.017:61752): user pid=26135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338301.017:61753): login pid=26135 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171338301.021:61754): user pid=26135 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338301.021:61755): user pid=26135 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171338601.357:61756): user pid=26169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338601.358:61757): login pid=26169 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171338601.358:61758): user pid=26168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338601.358:61759): login pid=26168 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171338601.362:61760): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338601.362:61761): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171338601.364:61762): user pid=26169 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338601.364:61763): user pid=26169 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171338601.381:61764): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171338601.381:61765): user pid=26168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171338901.697:61766): user pid=26208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171338901.698:61767): login pid=26208 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171338901.700:61768): user pid=26208 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171338901.700:61769): user pid=26208 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171339201.028:61770): user pid=26248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339201.028:61771): login pid=26248 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171339201.031:61772): user pid=26249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339201.031:61773): login pid=26249 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171339201.032:61774): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339201.032:61775): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171339201.034:61776): user pid=26249 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339201.034:61777): user pid=26249 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171339201.053:61778): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171339201.054:61779): user pid=26248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171339261.368:61780): user pid=26266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339261.368:61781): login pid=26266 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171339261.371:61782): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339261.371:61783): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171339262.251:61784): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171339262.252:61785): user pid=26266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171339322.670:61786): avc:  denied  { search } for  pid=26297 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171339322.670:61786): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171339322.670:61787): avc:  denied  { create } for  pid=26297 comm="pyzor" name="8JI-6g" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339322.670:61787): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171339322.671:61788): avc:  denied  { getattr } for  pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339322.671:61788): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd15e2e90 a2=7fffd15e2e90 a3=2 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171339322.671:61788):  path="/tmp/8JI-6g"
>type=AVC msg=audit(1171339322.671:61789): avc:  denied  { write } for  pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339322.671:61789): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171339322.671:61789):  path="/tmp/8JI-6g"
>type=AVC msg=audit(1171339322.671:61790): avc:  denied  { unlink } for  pid=26297 comm="pyzor" name="8JI-6g" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339322.671:61790): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171339322.673:61791): avc:  denied  { read } for  pid=26297 comm="pyzor" name="tmpog9fEZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339322.673:61791): arch=c000003e syscall=0 success=yes exit=222 a0=4 a1=2aaaaf34d000 a2=1000 a3=20 items=0 ppid=6550 pid=26297 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171339322.673:61791):  path=2F746D702F746D706F673966455A202864656C6574656429
>type=AVC msg=audit(1171339327.657:61792): avc:  denied  { append } for  pid=26293 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171339327.657:61792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26288 pid=26293 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171339501.259:61793): user pid=26312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339501.259:61794): login pid=26312 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171339501.262:61795): user pid=26312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339501.262:61796): user pid=26312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171339801.596:61797): user pid=26348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339801.597:61798): login pid=26348 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171339801.599:61799): user pid=26349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171339801.599:61800): login pid=26349 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171339801.600:61801): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339801.600:61802): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171339801.607:61803): user pid=26349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171339801.607:61804): user pid=26349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171339801.622:61805): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171339801.622:61806): user pid=26348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171339987.223:61807): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171339987.224:61808): user pid=25187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171340101.229:61809): user pid=26387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171340101.229:61810): login pid=26387 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171340101.233:61811): user pid=26387 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171340101.233:61812): user pid=26387 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171340401.554:61813): user pid=26421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171340401.554:61814): login pid=26421 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171340401.556:61815): user pid=26422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171340401.556:61816): login pid=26422 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171340401.558:61817): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171340401.558:61818): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171340401.563:61819): user pid=26422 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171340401.563:61820): user pid=26422 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171340401.588:61821): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171340401.589:61822): user pid=26421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171340461.345:61823): avc:  denied  { search } for  pid=26447 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171340461.345:61823): avc:  denied  { write } for  pid=26447 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171340461.345:61823): avc:  denied  { add_name } for  pid=26447 comm="pyzor" name="_h2hTs" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171340461.345:61823): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=26447 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171340461.345:61824): avc:  denied  { remove_name } for  pid=26447 comm="pyzor" name="_h2hTs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171340461.345:61824): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=26447 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171340466.308:61825): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171340466.308:61825): arch=c000003e syscall=62 success=yes exit=0 a0=674f a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340466.477:61826): avc:  denied  { write } for  pid=26443 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171340466.477:61826): avc:  denied  { add_name } for  pid=26443 comm="procmail" name="_LdG.yyT0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171340466.477:61826): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=26438 pid=26443 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171340466.478:61827): avc:  denied  { remove_name } for  pid=26443 comm="procmail" name="_LdG.yyT0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171340466.478:61827): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fff56a4a380 a3=61ca20 items=0 ppid=26438 pid=26443 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171340701.890:61828): user pid=26470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171340701.891:61829): login pid=26470 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171340701.895:61830): user pid=26470 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171340701.895:61831): user pid=26470 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171340702.220:61832): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340702.220:61832): arch=c000003e syscall=2 success=yes exit=12 a0=33464a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340702.220:61833): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340702.220:61833): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=2 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171340702.220:61833):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171340702.225:61834): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340702.225:61834): arch=c000003e syscall=2 success=yes exit=9 a0=32a2240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340702.755:61835): avc:  denied  { getattr } for  pid=26489 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340702.755:61835): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb173b6e0 a2=7fffb173b6e0 a3=6c6280 items=0 ppid=6550 pid=26489 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171340702.755:61835):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171340702.755:61836): avc:  denied  { read } for  pid=26489 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340702.755:61836): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=26489 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171340707.838:61837): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.838:61837): arch=c000003e syscall=86 success=yes exit=0 a0=32c7330 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340707.838:61838): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.838:61838): arch=c000003e syscall=87 success=yes exit=0 a0=32c7330 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340707.839:61839): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.839:61839): arch=c000003e syscall=2 success=yes exit=9 a0=3425ac0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171340707.880:61840): avc:  denied  { create } for  pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.880:61840): arch=c000003e syscall=2 success=yes exit=6 a0=61c890 a1=c1 a2=124 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171340707.880:61841): avc:  denied  { write } for  pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.880:61841): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171340707.880:61841):  path="/home/phighley/_0dG.j2T0FB.douglas"
>type=AVC msg=audit(1171340707.880:61842): avc:  denied  { getattr } for  pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.880:61842): arch=c000003e syscall=4 success=yes exit=0 a0=61c890 a1=7fffff0c7ab0 a2=7fffff0c7ab0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171340707.880:61842):  path="/home/phighley/_0dG.j2T0FB.douglas"
>type=AVC msg=audit(1171340707.881:61843): avc:  denied  { link } for  pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.881:61843): arch=c000003e syscall=86 success=yes exit=0 a0=61c890 a1=61b530 a2=7fffff0c79d0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171340707.881:61844): avc:  denied  { unlink } for  pid=26484 comm="procmail" name="_0dG.j2T0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.881:61844): arch=c000003e syscall=87 success=yes exit=0 a0=61c890 a1=61b530 a2=7fffff0c79d0 a3=61c890 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171340707.881:61845): avc:  denied  { append } for  pid=26484 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.881:61845): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171340707.881:61846): avc:  denied  { lock } for  pid=26484 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171340707.881:61846): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26479 pid=26484 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171340707.881:61846):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171341001.251:61847): user pid=26516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341001.251:61848): login pid=26516 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171341001.253:61849): user pid=26517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341001.254:61850): login pid=26517 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171341001.254:61851): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341001.254:61852): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171341001.259:61853): user pid=26517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341001.259:61854): user pid=26517 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171341001.275:61855): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171341001.275:61856): user pid=26516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171341301.585:61857): user pid=26554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341301.585:61858): login pid=26554 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171341301.590:61859): user pid=26554 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341301.590:61860): user pid=26554 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171341601.918:61861): user pid=26587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341601.918:61862): login pid=26587 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171341601.921:61863): user pid=26588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341601.921:61864): login pid=26588 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171341601.923:61865): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341601.923:61866): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171341601.933:61867): user pid=26588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341601.933:61868): user pid=26588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171341601.943:61869): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171341601.943:61870): user pid=26587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171341901.269:61871): user pid=26624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171341901.269:61872): login pid=26624 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171341901.273:61873): user pid=26624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171341901.273:61874): user pid=26624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171341972.450:61875): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171341972.450:61876): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171341982.513:61877): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171341982.514:61878): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171341982.523:61879): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171341982.527:61880): login pid=3672 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171341982.537:61881): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171341982.537:61882): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171342201.602:61883): user pid=26898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171342201.603:61884): user pid=26899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171342201.603:61885): login pid=26898 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171342201.603:61886): login pid=26899 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171342201.608:61887): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342201.609:61888): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171342201.609:61889): user pid=26899 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342201.609:61890): user pid=26899 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171342201.637:61891): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171342201.638:61892): user pid=26898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171342501.959:61893): user pid=26974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171342501.959:61894): login pid=26974 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171342501.963:61895): user pid=26974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342501.963:61896): user pid=26974 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171342687.717:61897): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342687.717:61897): arch=c000003e syscall=2 success=yes exit=12 a0=3347180 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342687.717:61898): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342687.717:61898): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342687.717:61898):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171342687.724:61899): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342687.724:61899): arch=c000003e syscall=2 success=yes exit=9 a0=35723d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342688.378:61900): avc:  denied  { search } for  pid=27014 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171342688.378:61900): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171342688.378:61901): avc:  denied  { getattr } for  pid=27014 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.378:61901): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9c9ce970 a2=7fff9c9ce970 a3=6c6280 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342688.378:61901):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171342688.378:61902): avc:  denied  { read } for  pid=27014 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.378:61902): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171342688.379:61903): avc:  denied  { search } for  pid=27014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171342688.379:61903): avc:  denied  { write } for  pid=27014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171342688.379:61903): avc:  denied  { add_name } for  pid=27014 comm="pyzor" name="RHDdV3" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171342688.379:61903): avc:  denied  { create } for  pid=27014 comm="pyzor" name="RHDdV3" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.379:61903): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171342688.380:61904): avc:  denied  { getattr } for  pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.380:61904): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9c9cce60 a2=7fff9c9cce60 a3=3 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342688.380:61904):  path="/tmp/RHDdV3"
>type=AVC msg=audit(1171342688.380:61905): avc:  denied  { write } for  pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.380:61905): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342688.380:61905):  path="/tmp/RHDdV3"
>type=AVC msg=audit(1171342688.380:61906): avc:  denied  { remove_name } for  pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171342688.380:61906): avc:  denied  { unlink } for  pid=27014 comm="pyzor" name="RHDdV3" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.380:61906): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171342688.381:61907): avc:  denied  { read } for  pid=27014 comm="pyzor" name="tmpK7nTOg" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342688.381:61907): arch=c000003e syscall=0 success=yes exit=276 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=27014 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342688.381:61907):  path=2F746D702F746D704B376E544F67202864656C6574656429
>type=AVC msg=audit(1171342693.340:61908): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171342693.340:61908): arch=c000003e syscall=62 success=yes exit=0 a0=6986 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342693.354:61909): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.354:61909): arch=c000003e syscall=86 success=yes exit=0 a0=31dc2d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342693.354:61910): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.354:61910): arch=c000003e syscall=87 success=yes exit=0 a0=31dc2d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342693.355:61911): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.355:61911): arch=c000003e syscall=2 success=yes exit=9 a0=3359cd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171342693.374:61912): avc:  denied  { write } for  pid=27010 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171342693.374:61912): avc:  denied  { add_name } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171342693.374:61912): avc:  denied  { create } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.374:61912): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171342693.375:61913): avc:  denied  { write } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.375:61913): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342693.375:61913):  path="/home/dhighley/_CmG.lVU0FB.douglas"
>type=AVC msg=audit(1171342693.375:61914): avc:  denied  { getattr } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.375:61914): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff21afe4f0 a2=7fff21afe4f0 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342693.375:61914):  path="/home/dhighley/_CmG.lVU0FB.douglas"
>type=AVC msg=audit(1171342693.375:61915): avc:  denied  { link } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.375:61915): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cc60 a2=7fff21afe410 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171342693.375:61916): avc:  denied  { remove_name } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171342693.375:61916): avc:  denied  { unlink } for  pid=27010 comm="procmail" name="_CmG.lVU0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.375:61916): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cc60 a2=7fff21afe410 a3=61b670 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171342693.375:61917): avc:  denied  { append } for  pid=27010 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342693.375:61917): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=27007 pid=27010 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171342697.842:61918): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171342697.842:61919): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171342697.852:61920): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171342697.852:61921): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1171342714.960:61922): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171342714.960:61923): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171342714.980:61924): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171342714.980:61925): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1171342738.171:61926): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171342738.171:61927): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171342738.180:61928): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171342738.181:61929): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1171342763.207:61930): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171342763.207:61931): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1171342763.216:61932): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1171342763.217:61933): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1171342788.803:61934): user pid=27303 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171342788.803:61935): user pid=27303 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171342801.295:61936): user pid=27309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171342801.295:61937): user pid=27308 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171342801.296:61938): login pid=27309 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171342801.296:61939): login pid=27308 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171342801.298:61940): user pid=27310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171342801.299:61941): login pid=27310 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171342801.302:61942): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342801.303:61943): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171342801.305:61944): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342801.305:61945): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171342801.309:61946): user pid=27310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342801.309:61947): user pid=27310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171342801.342:61948): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171342801.342:61949): user pid=27308 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171342842.423:61950): avc:  denied  { lock } for  pid=27304 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342842.423:61950): arch=c000003e syscall=72 success=yes exit=0 a0=9 a1=7 a2=7fff553c58d0 a3=3 items=0 ppid=3104 pid=27304 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171342842.423:61950):  path="/home/dhighley/Mail/Trash"
>type=AVC msg=audit(1171342842.561:61951): avc:  denied  { setattr } for  pid=27304 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171342842.561:61951): arch=c000003e syscall=132 success=yes exit=0 a0=6b4858 a1=7fff553c5b80 a2=0 a3=0 items=0 ppid=3104 pid=27304 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171342861.651:61952): user pid=27351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171342861.652:61953): login pid=27351 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171342861.657:61954): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171342861.657:61955): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171342862.580:61956): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171342862.581:61957): user pid=27351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171342883.148:61958): user pid=27369 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171342883.148:61959): user pid=27369 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171343101.589:61960): user pid=27397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171343101.589:61961): login pid=27397 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171343101.593:61962): user pid=27397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171343101.594:61963): user pid=27397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171343401.937:61964): user pid=27434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171343401.937:61965): login pid=27434 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171343401.939:61966): user pid=27435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171343401.939:61967): login pid=27435 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171343401.941:61968): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171343401.941:61969): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171343401.946:61970): user pid=27435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171343401.946:61971): user pid=27435 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171343401.970:61972): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171343401.970:61973): user pid=27434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171343701.287:61974): user pid=27471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171343701.287:61975): login pid=27471 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171343701.291:61976): user pid=27471 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171343701.291:61977): user pid=27471 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171343709.301:61978): avc:  denied  { getattr } for  pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171343709.301:61978): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fffa63559a0 a2=7fffa63559a0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171343709.301:61978):  path="/bin/hostname"
>type=AVC msg=audit(1171343709.301:61979): avc:  denied  { execute } for  pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171343709.301:61979): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171343709.301:61980): avc:  denied  { read } for  pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171343709.301:61980): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171343709.301:61981): avc:  denied  { execute_no_trans } for  pid=27518 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171343709.301:61981): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30538 pid=27518 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171343709.301:61981):  path="/bin/hostname"
>type=USER_ACCT msg=audit(1171344001.667:61982): user pid=27548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344001.668:61983): login pid=27548 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171344001.670:61984): user pid=27549 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344001.671:61985): login pid=27549 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171344001.672:61986): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344001.672:61987): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171344001.674:61988): user pid=27549 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344001.675:61989): user pid=27549 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171344001.702:61990): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171344001.703:61991): user pid=27548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171344301.012:61992): user pid=27621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344301.012:61993): login pid=27621 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171344301.016:61994): user pid=27621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344301.016:61995): user pid=27621 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171344474.352:61996): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171344474.352:61997): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1171344474.362:61998): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1171344474.362:61999): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1171344496.253:62000): user pid=27713 uid=0 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: chauthtok acct=phighley : exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1171344496.253:62001): user pid=27713 uid=0 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='op=change password id=1003 exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1171344504.035:62002): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1171344504.035:62003): user pid=27675 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171344601.360:62004): user pid=27742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344601.360:62005): login pid=27742 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171344601.362:62006): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344601.363:62007): login pid=27743 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171344601.365:62008): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344601.365:62009): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171344601.370:62010): user pid=27743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344601.370:62011): user pid=27743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171344601.390:62012): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171344601.391:62013): user pid=27742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171344901.722:62014): user pid=27779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171344901.722:62015): login pid=27779 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171344901.725:62016): user pid=27779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171344901.725:62017): user pid=27779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171345182.916:62018): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171345182.917:62019): user pid=27157 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171345201.068:62020): user pid=27818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171345201.069:62021): login pid=27818 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171345201.071:62022): user pid=27819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171345201.071:62023): login pid=27819 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171345201.074:62024): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171345201.074:62025): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171345201.077:62026): user pid=27819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171345201.077:62027): user pid=27819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171345201.101:62028): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171345201.101:62029): user pid=27818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171345501.441:62030): user pid=27858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171345501.441:62031): login pid=27858 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171345501.446:62032): user pid=27858 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171345501.446:62033): user pid=27858 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171345661.564:62034): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171345661.565:62035): user pid=27084 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1171345705.605:62036): user pid=27920 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171345705.605:62037): user pid=27920 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171345801.796:62038): user pid=27945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171345801.796:62039): login pid=27945 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171345801.798:62040): user pid=27946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171345801.798:62041): login pid=27946 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171345801.804:62042): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171345801.804:62043): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171345801.808:62044): user pid=27946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171345801.809:62045): user pid=27946 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171345801.826:62046): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171345801.827:62047): user pid=27945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171345831.907:62048): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171345831.907:62049): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171345831.923:62050): avc:  denied  { lock } for  pid=27968 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171345831.923:62050): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa3720b70 a3=0 items=0 ppid=3104 pid=27968 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171345831.923:62050):  path="/home/dhighley/Mail/Trash"
>type=USER_ACCT msg=audit(1171346101.188:62051): user pid=27993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171346101.189:62052): login pid=27993 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171346101.197:62053): user pid=27993 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171346101.197:62054): user pid=27993 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171346401.546:62055): user pid=28099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171346401.546:62056): login pid=28099 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171346401.548:62057): user pid=28100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171346401.549:62058): login pid=28100 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171346401.550:62059): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171346401.550:62060): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171346401.555:62061): user pid=28100 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171346401.555:62062): user pid=28100 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171346401.575:62063): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171346401.576:62064): user pid=28099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171346461.952:62065): user pid=28120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171346461.952:62066): login pid=28120 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171346461.956:62067): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171346461.956:62068): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171346463.015:62069): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171346463.016:62070): user pid=28120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171346617.615:62071): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346617.615:62071): arch=c000003e syscall=2 success=yes exit=12 a0=3347540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346617.616:62072): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346617.616:62072): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346617.616:62072):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171346617.623:62073): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346617.623:62073): arch=c000003e syscall=2 success=yes exit=9 a0=34b1560 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346618.394:62074): avc:  denied  { search } for  pid=28165 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171346618.394:62074): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346618.394:62075): avc:  denied  { getattr } for  pid=28165 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.394:62075): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4ffaaf50 a2=7fff4ffaaf50 a3=6c6280 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346618.394:62075):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171346618.394:62076): avc:  denied  { read } for  pid=28165 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.394:62076): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346618.395:62077): avc:  denied  { search } for  pid=28165 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346618.395:62077): avc:  denied  { write } for  pid=28165 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346618.395:62077): avc:  denied  { add_name } for  pid=28165 comm="pyzor" name="gUJV8c" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346618.395:62077): avc:  denied  { create } for  pid=28165 comm="pyzor" name="gUJV8c" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.395:62077): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346618.396:62078): avc:  denied  { getattr } for  pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.396:62078): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4ffa9440 a2=7fff4ffa9440 a3=3 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346618.396:62078):  path="/tmp/gUJV8c"
>type=AVC msg=audit(1171346618.396:62079): avc:  denied  { write } for  pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.396:62079): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346618.396:62079):  path="/tmp/gUJV8c"
>type=AVC msg=audit(1171346618.396:62080): avc:  denied  { remove_name } for  pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346618.396:62080): avc:  denied  { unlink } for  pid=28165 comm="pyzor" name="gUJV8c" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.396:62080): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346618.397:62081): avc:  denied  { read } for  pid=28165 comm="pyzor" name="tmp-VRBkP" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346618.397:62081): arch=c000003e syscall=0 success=yes exit=1165 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=28165 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346618.397:62081):  path=2F746D702F746D702D5652426B50202864656C6574656429
>type=AVC msg=audit(1171346623.354:62082): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171346623.354:62082): arch=c000003e syscall=62 success=yes exit=0 a0=6e05 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346623.372:62083): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634221 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.372:62083): arch=c000003e syscall=86 success=yes exit=0 a0=31c87a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346623.373:62084): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634221 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.373:62084): arch=c000003e syscall=87 success=yes exit=0 a0=31c87a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346623.374:62085): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.374:62085): arch=c000003e syscall=2 success=yes exit=9 a0=2fba900 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171346623.441:62086): avc:  denied  { write } for  pid=28161 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171346623.441:62086): avc:  denied  { add_name } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171346623.441:62086): avc:  denied  { create } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.441:62086): arch=c000003e syscall=2 success=yes exit=6 a0=61cc50 a1=c1 a2=124 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171346623.442:62087): avc:  denied  { write } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.442:62087): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346623.442:62087):  path="/home/dhighley/_B4G._SV0FB.douglas"
>type=AVC msg=audit(1171346623.442:62088): avc:  denied  { getattr } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.442:62088): arch=c000003e syscall=4 success=yes exit=0 a0=61cc50 a1=7fff9fa1c420 a2=7fff9fa1c420 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346623.442:62088):  path="/home/dhighley/_B4G._SV0FB.douglas"
>type=AVC msg=audit(1171346623.442:62089): avc:  denied  { link } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.442:62089): arch=c000003e syscall=86 success=yes exit=0 a0=61cc50 a1=61b510 a2=7fff9fa1c340 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171346623.442:62090): avc:  denied  { remove_name } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171346623.442:62090): avc:  denied  { unlink } for  pid=28161 comm="procmail" name="_B4G._SV0FB.douglas" dev=dm-0 ino=12487114 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.442:62090): arch=c000003e syscall=87 success=yes exit=0 a0=61cc50 a1=61b510 a2=7fff9fa1c340 a3=61cc50 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171346623.442:62091): avc:  denied  { append } for  pid=28161 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346623.442:62091): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=28158 pid=28161 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171346701.027:62092): user pid=28180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171346701.027:62093): login pid=28180 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171346701.031:62094): user pid=28180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171346701.031:62095): user pid=28180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171346848.156:62096): avc:  denied  { search } for  pid=28232 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171346848.156:62096): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346848.157:62097): avc:  denied  { search } for  pid=28232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346848.157:62097): avc:  denied  { write } for  pid=28232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346848.157:62097): avc:  denied  { add_name } for  pid=28232 comm="pyzor" name="_5IdiN" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346848.157:62097): avc:  denied  { create } for  pid=28232 comm="pyzor" name="_5IdiN" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346848.157:62097): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346848.157:62098): avc:  denied  { getattr } for  pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346848.157:62098): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffbf7c4070 a2=7fffbf7c4070 a3=2 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346848.157:62098):  path="/tmp/_5IdiN"
>type=AVC msg=audit(1171346848.158:62099): avc:  denied  { write } for  pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346848.158:62099): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171346848.158:62099):  path="/tmp/_5IdiN"
>type=AVC msg=audit(1171346848.158:62100): avc:  denied  { remove_name } for  pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171346848.158:62100): avc:  denied  { unlink } for  pid=28232 comm="pyzor" name="_5IdiN" dev=dm-0 ino=30703651 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346848.158:62100): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=28232 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171346849.379:62101): avc:  denied  { append } for  pid=28228 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171346849.379:62101): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=28219 pid=28228 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171347001.429:62102): user pid=28253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347001.429:62103): login pid=28253 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171347001.433:62104): user pid=28252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347001.433:62105): login pid=28252 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171347001.434:62106): user pid=28253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347001.434:62107): user pid=28253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171347001.449:62108): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347001.449:62109): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171347001.478:62110): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171347001.478:62111): user pid=28252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171347301.862:62112): user pid=28654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347301.863:62113): login pid=28654 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171347301.880:62114): user pid=28654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347301.880:62115): user pid=28654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1171347511.112:62116): user pid=28975 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1171347511.141:62117): user pid=28976 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171347601.207:62118): user pid=29437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347601.208:62119): login pid=29437 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171347601.209:62120): user pid=29438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347601.209:62121): login pid=29438 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171347601.221:62122): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347601.221:62123): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171347601.222:62124): user pid=29438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347601.222:62125): user pid=29438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171347601.799:62126): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171347601.799:62127): user pid=29437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171347697.559:62128): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347697.559:62128): arch=c000003e syscall=2 success=yes exit=12 a0=33e7eb0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347697.560:62129): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347697.560:62129): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347697.560:62129):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171347697.571:62130): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347697.571:62130): arch=c000003e syscall=2 success=yes exit=9 a0=3228c10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347698.251:62131): avc:  denied  { search } for  pid=29648 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171347698.251:62131): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171347698.257:62132): avc:  denied  { getattr } for  pid=29648 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.257:62132): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3df1cec0 a2=7fff3df1cec0 a3=6c6280 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347698.257:62132):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171347698.257:62133): avc:  denied  { read } for  pid=29648 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.257:62133): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171347698.258:62134): avc:  denied  { search } for  pid=29648 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171347698.258:62134): avc:  denied  { write } for  pid=29648 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171347698.258:62134): avc:  denied  { add_name } for  pid=29648 comm="pyzor" name="_t6zig" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171347698.258:62134): avc:  denied  { create } for  pid=29648 comm="pyzor" name="_t6zig" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.258:62134): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171347698.266:62135): avc:  denied  { getattr } for  pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.266:62135): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3df1b7c0 a2=7fff3df1b7c0 a3=2 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347698.266:62135):  path="/tmp/_t6zig"
>type=AVC msg=audit(1171347698.266:62136): avc:  denied  { write } for  pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.266:62136): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347698.266:62136):  path="/tmp/_t6zig"
>type=AVC msg=audit(1171347698.266:62137): avc:  denied  { remove_name } for  pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171347698.266:62137): avc:  denied  { unlink } for  pid=29648 comm="pyzor" name="_t6zig" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.266:62137): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171347698.267:62138): avc:  denied  { read } for  pid=29648 comm="pyzor" name="tmpolR0cs" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347698.267:62138): arch=c000003e syscall=0 success=yes exit=460 a0=4 a1=2aaaaf34d000 a2=1000 a3=16 items=0 ppid=6550 pid=29648 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347698.267:62138):  path=2F746D702F746D706F6C52306373202864656C6574656429
>type=AVC msg=audit(1171347703.070:62139): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171347703.070:62139): arch=c000003e syscall=62 success=yes exit=0 a0=73d0 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347703.372:62140): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.372:62140): arch=c000003e syscall=86 success=yes exit=0 a0=3032cd0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347703.372:62141): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634218 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.372:62141): arch=c000003e syscall=87 success=yes exit=0 a0=3032cd0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347703.380:62142): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.380:62142): arch=c000003e syscall=2 success=yes exit=9 a0=329abd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171347703.687:62143): avc:  denied  { write } for  pid=29640 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171347703.687:62143): avc:  denied  { add_name } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171347703.687:62143): avc:  denied  { create } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.687:62143): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171347703.687:62144): avc:  denied  { write } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.687:62144): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347703.687:62144):  path="/home/dhighley/_IPH.3jV0FB.douglas"
>type=AVC msg=audit(1171347703.688:62145): avc:  denied  { getattr } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.688:62145): arch=c000003e syscall=4 success=yes exit=0 a0=61c7f0 a1=7fffaee6eb00 a2=7fffaee6eb00 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171347703.688:62145):  path="/home/dhighley/_IPH.3jV0FB.douglas"
>type=AVC msg=audit(1171347703.688:62146): avc:  denied  { link } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.688:62146): arch=c000003e syscall=86 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fffaee6ea20 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171347703.688:62147): avc:  denied  { remove_name } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171347703.688:62147): avc:  denied  { unlink } for  pid=29640 comm="procmail" name="_IPH.3jV0FB.douglas" dev=dm-0 ino=12487108 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.688:62147): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fffaee6ea20 a3=61c7f0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171347703.704:62148): avc:  denied  { append } for  pid=29640 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171347703.704:62148): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=29637 pid=29640 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171347861.476:62149): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1171347861.488:62150): user pid=27226 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171347901.333:62151): user pid=30170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171347901.334:62152): login pid=30170 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171347901.337:62153): user pid=30170 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171347901.337:62154): user pid=30170 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171347914.458:62155): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171347914.459:62156): user pid=27017 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171348201.681:62157): user pid=30208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171348201.682:62158): login pid=30208 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171348201.682:62159): user pid=30209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171348201.682:62160): login pid=30209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171348201.688:62161): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171348201.688:62162): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171348201.692:62163): user pid=30209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171348201.693:62164): user pid=30209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171348201.712:62165): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171348201.712:62166): user pid=30208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171348339.701:62167): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171348339.701:62168): user pid=3672 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ERR msg=audit(1171348340.367:62169): user pid=3616 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1171348501.033:62170): user pid=30287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171348501.034:62171): login pid=30287 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171348501.037:62172): user pid=30287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171348501.037:62173): user pid=30287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171348801.367:62174): user pid=30325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171348801.367:62175): login pid=30325 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171348801.368:62176): user pid=30324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171348801.369:62177): login pid=30324 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171348801.371:62178): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171348801.371:62179): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171348801.376:62180): user pid=30325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171348801.376:62181): user pid=30325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171348801.396:62182): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171348801.396:62183): user pid=30324 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171349062.896:62184): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349062.896:62184): arch=c000003e syscall=2 success=yes exit=12 a0=33ed420 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349062.896:62185): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349062.896:62185): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349062.896:62185):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171349062.910:62186): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349062.910:62186): arch=c000003e syscall=2 success=yes exit=9 a0=34977f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349063.470:62187): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.470:62187): arch=c000003e syscall=1 success=yes exit=67 a0=9 a1=31e2f10 a2=43 a3=31e2f10 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349063.470:62187):  path="/home/dhighley/.razor/razor-agent.log"
>type=AVC msg=audit(1171349063.511:62188): avc:  denied  { search } for  pid=30369 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171349063.511:62188): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171349063.511:62189): avc:  denied  { getattr } for  pid=30369 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.511:62189): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff64b5fb00 a2=7fff64b5fb00 a3=6c6280 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349063.511:62189):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171349063.511:62190): avc:  denied  { read } for  pid=30369 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.511:62190): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171349063.512:62191): avc:  denied  { search } for  pid=30369 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171349063.512:62191): avc:  denied  { write } for  pid=30369 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171349063.512:62191): avc:  denied  { add_name } for  pid=30369 comm="pyzor" name="Iqbi67" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171349063.512:62191): avc:  denied  { create } for  pid=30369 comm="pyzor" name="Iqbi67" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.512:62191): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171349063.513:62192): avc:  denied  { getattr } for  pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.513:62192): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff64b5d970 a2=7fff64b5d970 a3=3 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349063.513:62192):  path="/tmp/Iqbi67"
>type=AVC msg=audit(1171349063.513:62193): avc:  denied  { write } for  pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.513:62193): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349063.513:62193):  path="/tmp/Iqbi67"
>type=AVC msg=audit(1171349063.513:62194): avc:  denied  { remove_name } for  pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171349063.513:62194): avc:  denied  { unlink } for  pid=30369 comm="pyzor" name="Iqbi67" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.513:62194): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171349063.540:62195): avc:  denied  { read } for  pid=30369 comm="pyzor" name="tmpsPJ03Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349063.540:62195): arch=c000003e syscall=0 success=yes exit=2778 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=6550 pid=30369 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349063.540:62195):  path=2F746D702F746D7073504A303351202864656C6574656429
>type=AVC msg=audit(1171349068.473:62196): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171349068.473:62196): arch=c000003e syscall=62 success=yes exit=0 a0=76a1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349068.485:62197): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.485:62197): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349068.485:62197):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.6550"
>type=AVC msg=audit(1171349068.485:62198): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.485:62198): arch=c000003e syscall=86 success=yes exit=0 a0=30524a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349068.486:62199): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.486:62199): arch=c000003e syscall=87 success=yes exit=0 a0=30524a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349068.486:62200): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.486:62200): arch=c000003e syscall=2 success=yes exit=9 a0=33eb9e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171349068.519:62201): avc:  denied  { write } for  pid=30365 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171349068.519:62201): avc:  denied  { add_name } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171349068.519:62201): avc:  denied  { create } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.519:62201): arch=c000003e syscall=2 success=yes exit=6 a0=620760 a1=c1 a2=124 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171349068.520:62202): avc:  denied  { write } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.520:62202): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349068.520:62202):  path="/home/dhighley/_daH.M5V0FB.douglas"
>type=AVC msg=audit(1171349068.520:62203): avc:  denied  { getattr } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.520:62203): arch=c000003e syscall=4 success=yes exit=0 a0=620760 a1=7fffa1da0790 a2=7fffa1da0790 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171349068.520:62203):  path="/home/dhighley/_daH.M5V0FB.douglas"
>type=AVC msg=audit(1171349068.520:62204): avc:  denied  { link } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.520:62204): arch=c000003e syscall=86 success=yes exit=0 a0=620760 a1=620740 a2=7fffa1da06b0 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171349068.520:62205): avc:  denied  { remove_name } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171349068.520:62205): avc:  denied  { unlink } for  pid=30365 comm="procmail" name="_daH.M5V0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.520:62205): arch=c000003e syscall=87 success=yes exit=0 a0=620760 a1=620740 a2=7fffa1da06b0 a3=620760 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171349068.520:62206): avc:  denied  { append } for  pid=30365 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349068.520:62206): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=30360 pid=30365 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171349101.707:62207): user pid=30377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171349101.707:62208): login pid=30377 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171349101.711:62209): user pid=30377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171349101.711:62210): user pid=30377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171349189.674:62211): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171349189.674:62211): arch=c000003e syscall=2 success=yes exit=12 a0=3377b00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171349401.043:62212): user pid=30422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171349401.043:62213): login pid=30422 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171349401.043:62214): user pid=30423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171349401.044:62215): login pid=30423 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171349401.049:62216): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171349401.049:62217): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171349401.055:62218): user pid=30423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171349401.056:62219): user pid=30423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171349401.071:62220): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171349401.071:62221): user pid=30422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171349701.399:62222): user pid=30458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171349701.399:62223): login pid=30458 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171349701.403:62224): user pid=30458 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171349701.403:62225): user pid=30458 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171349940.487:62226): avc:  denied  { search } for  pid=30499 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171349940.487:62226): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=30499 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171350001.739:62227): user pid=30505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350001.739:62228): login pid=30505 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171350001.741:62229): user pid=30506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350001.741:62230): login pid=30506 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171350001.744:62231): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350001.745:62232): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171350001.747:62233): user pid=30506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350001.747:62234): user pid=30506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171350001.773:62235): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171350001.774:62236): user pid=30505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171350061.067:62237): user pid=30522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350061.067:62238): login pid=30522 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171350061.070:62239): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350061.070:62240): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171350062.111:62241): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171350062.111:62242): user pid=30522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171350225.053:62243): avc:  denied  { create } for  pid=30569 comm="pyzor" name="zyJl7X" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350225.053:62243): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171350225.053:62244): avc:  denied  { getattr } for  pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350225.053:62244): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe87bec50 a2=7fffe87bec50 a3=3 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171350225.053:62244):  path="/tmp/zyJl7X"
>type=AVC msg=audit(1171350225.053:62245): avc:  denied  { write } for  pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350225.053:62245): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171350225.053:62245):  path="/tmp/zyJl7X"
>type=AVC msg=audit(1171350225.053:62246): avc:  denied  { search } for  pid=30569 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171350225.053:62246): avc:  denied  { write } for  pid=30569 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171350225.053:62246): avc:  denied  { remove_name } for  pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171350225.053:62246): avc:  denied  { unlink } for  pid=30569 comm="pyzor" name="zyJl7X" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350225.053:62246): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171350225.054:62247): avc:  denied  { add_name } for  pid=30569 comm="pyzor" name="tmp2SAdjz" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171350225.054:62247): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171350225.078:62248): avc:  denied  { read } for  pid=30569 comm="pyzor" name="tmp2SAdjz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350225.078:62248): arch=c000003e syscall=0 success=yes exit=496 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=30569 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171350225.078:62248):  path=2F746D702F746D70325341646A7A202864656C6574656429
>type=AVC msg=audit(1171350227.912:62249): avc:  denied  { append } for  pid=30565 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171350227.912:62249): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=30562 pid=30565 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171350301.118:62250): user pid=30587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350301.118:62251): login pid=30587 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171350301.122:62252): user pid=30587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350301.122:62253): user pid=30587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171350601.450:62254): user pid=30624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350601.450:62255): login pid=30624 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171350601.453:62256): user pid=30625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350601.453:62257): login pid=30625 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171350601.454:62258): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350601.454:62259): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171350601.456:62260): user pid=30625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350601.457:62261): user pid=30625 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171350601.478:62262): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171350601.478:62263): user pid=30624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171350787.548:62264): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171350787.549:62265): user pid=27309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171350901.553:62266): user pid=30663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171350901.553:62267): login pid=30663 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171350901.557:62268): user pid=30663 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171350901.557:62269): user pid=30663 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171351201.886:62270): user pid=30697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171351201.887:62271): login pid=30697 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171351201.889:62272): user pid=30698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171351201.889:62273): login pid=30698 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171351201.890:62274): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171351201.891:62275): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171351201.894:62276): user pid=30698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171351201.894:62277): user pid=30698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171351201.911:62278): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171351201.912:62279): user pid=30697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171351501.230:62280): user pid=30735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171351501.231:62281): login pid=30735 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171351501.235:62282): user pid=30735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171351501.235:62283): user pid=30735 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171351801.554:62284): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171351801.554:62285): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171351801.554:62286): login pid=30770 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171351801.555:62287): login pid=30771 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171351801.560:62288): user pid=30771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171351801.560:62289): user pid=30771 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171351801.564:62290): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171351801.564:62291): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171351801.586:62292): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171351801.586:62293): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171352101.889:62294): user pid=30809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171352101.889:62295): login pid=30809 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171352101.892:62296): user pid=30809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171352101.892:62297): user pid=30809 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171352401.223:62298): user pid=30842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171352401.223:62299): login pid=30842 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171352401.225:62300): user pid=30843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171352401.225:62301): login pid=30843 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171352401.227:62302): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171352401.227:62303): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171352401.232:62304): user pid=30843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171352401.232:62305): user pid=30843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171352401.250:62306): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171352401.251:62307): user pid=30842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171352701.557:62308): user pid=30880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171352701.558:62309): login pid=30880 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171352701.562:62310): user pid=30880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171352701.562:62311): user pid=30880 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353001.881:62312): user pid=30915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353001.881:62313): login pid=30915 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171353001.883:62314): user pid=30916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353001.883:62315): login pid=30916 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171353001.886:62316): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353001.886:62317): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171353001.890:62318): user pid=30916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353001.890:62319): user pid=30916 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171353001.905:62320): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171353001.905:62321): user pid=30915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353181.218:62322): user pid=30942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353181.219:62323): login pid=30942 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171353181.222:62324): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353181.222:62325): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171353181.424:62326): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171353181.424:62327): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353301.430:62328): user pid=30960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353301.431:62329): login pid=30960 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171353301.435:62330): user pid=30960 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353301.435:62331): user pid=30960 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353601.755:62332): user pid=30993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353601.755:62333): login pid=30993 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171353601.757:62334): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353601.757:62335): login pid=30994 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171353601.759:62336): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353601.759:62337): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353601.760:62338): user pid=30995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353601.760:62339): login pid=30995 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171353601.768:62340): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353601.768:62341): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171353601.776:62342): user pid=30995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353601.776:62343): user pid=30995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171353601.781:62344): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171353601.782:62345): user pid=30993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353661.102:62346): user pid=31015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353661.103:62347): login pid=31015 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171353661.107:62348): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353661.107:62349): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171353661.990:62350): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171353661.991:62351): user pid=31015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171353901.998:62352): user pid=31050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171353901.999:62353): login pid=31050 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171353902.005:62354): user pid=31050 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171353902.005:62355): user pid=31050 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171354201.340:62356): user pid=31089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171354201.340:62357): login pid=31089 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171354201.342:62358): user pid=31090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171354201.342:62359): login pid=31090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171354201.344:62360): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171354201.344:62361): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171354201.346:62362): user pid=31090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171354201.346:62363): user pid=31090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171354201.362:62364): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171354201.363:62365): user pid=31089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171354481.444:62366): avc:  denied  { append } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354481.444:62366): arch=c000003e syscall=2 success=yes exit=12 a0=349ace0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354481.444:62367): avc:  denied  { ioctl } for  pid=6550 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354481.444:62367): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171354481.444:62367):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171354481.450:62368): avc:  denied  { append } for  pid=6550 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354481.450:62368): arch=c000003e syscall=2 success=yes exit=9 a0=321e870 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354482.158:62369): avc:  denied  { getattr } for  pid=31134 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354482.158:62369): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3ccc3c70 a2=7fff3ccc3c70 a3=6c6280 items=0 ppid=6550 pid=31134 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171354482.158:62369):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171354482.159:62370): avc:  denied  { read } for  pid=31134 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354482.159:62370): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=31134 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171354487.122:62371): avc:  denied  { signal } for  pid=6550 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171354487.122:62371): arch=c000003e syscall=62 success=yes exit=0 a0=799e a1=f a2=54 a3=0 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354487.135:62372): avc:  denied  { link } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354487.135:62372): arch=c000003e syscall=86 success=yes exit=0 a0=2fdc930 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354487.135:62373): avc:  denied  { unlink } for  pid=6550 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.6550" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354487.135:62373): arch=c000003e syscall=87 success=yes exit=0 a0=2fdc930 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354487.136:62374): avc:  denied  { write } for  pid=6550 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171354487.136:62374): arch=c000003e syscall=2 success=yes exit=9 a0=33e0660 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=6550 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171354487.176:62375): avc:  denied  { write } for  pid=31129 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171354487.176:62375): avc:  denied  { add_name } for  pid=31129 comm="procmail" name="_ZmH.3NX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171354487.176:62375): arch=c000003e syscall=2 success=yes exit=6 a0=61b620 a1=c1 a2=124 a3=61b620 items=0 ppid=31124 pid=31129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171354487.176:62376): avc:  denied  { remove_name } for  pid=31129 comm="procmail" name="_ZmH.3NX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171354487.176:62376): arch=c000003e syscall=87 success=yes exit=0 a0=61b620 a1=61c990 a2=7fffec274b90 a3=61b620 items=0 ppid=31124 pid=31129 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171354501.669:62377): user pid=31140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171354501.669:62378): login pid=31140 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171354501.672:62379): user pid=31140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171354501.672:62380): user pid=31140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171354801.004:62381): user pid=31177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171354801.004:62382): login pid=31177 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171354801.007:62383): user pid=31178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171354801.007:62384): login pid=31178 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171354801.008:62385): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171354801.008:62386): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171354801.011:62387): user pid=31178 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171354801.011:62388): user pid=31178 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171354801.031:62389): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171354801.031:62390): user pid=31177 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171355101.345:62391): user pid=31216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171355101.346:62392): login pid=31216 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171355101.349:62393): user pid=31216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171355101.349:62394): user pid=31216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171355401.668:62395): user pid=31251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171355401.668:62396): login pid=31251 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171355401.670:62397): user pid=31252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171355401.670:62398): login pid=31252 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171355401.672:62399): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171355401.672:62400): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171355401.677:62401): user pid=31252 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171355401.678:62402): user pid=31252 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171355401.691:62403): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171355401.692:62404): user pid=31251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171355701.010:62405): user pid=31287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171355701.011:62406): login pid=31287 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171355701.015:62407): user pid=31287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171355701.015:62408): user pid=31287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171355802.475:62409): avc:  denied  { search } for  pid=31313 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171355802.475:62409): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171355802.475:62410): avc:  denied  { create } for  pid=31313 comm="pyzor" name="b7_F6m" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355802.475:62410): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171355802.476:62411): avc:  denied  { getattr } for  pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355802.476:62411): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3c8d7d70 a2=7fff3c8d7d70 a3=3 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171355802.476:62411):  path="/tmp/b7_F6m"
>type=AVC msg=audit(1171355802.476:62412): avc:  denied  { write } for  pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355802.476:62412): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171355802.476:62412):  path="/tmp/b7_F6m"
>type=AVC msg=audit(1171355802.476:62413): avc:  denied  { unlink } for  pid=31313 comm="pyzor" name="b7_F6m" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355802.476:62413): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171355802.476:62414): avc:  denied  { read } for  pid=31313 comm="pyzor" name="tmpyxmpor" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355802.476:62414): arch=c000003e syscall=0 success=yes exit=546 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=6550 pid=31313 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171355802.476:62414):  path=2F746D702F746D7079786D706F72202864656C6574656429
>type=AVC msg=audit(1171355807.473:62415): avc:  denied  { append } for  pid=31309 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171355807.473:62415): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31304 pid=31309 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171355898.156:62416): avc:  denied  { search } for  pid=31332 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171355898.156:62416): avc:  denied  { write } for  pid=31332 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171355898.156:62416): avc:  denied  { add_name } for  pid=31332 comm="pyzor" name="15qR8x" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171355898.156:62416): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=6550 pid=31332 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171355898.157:62417): avc:  denied  { remove_name } for  pid=31332 comm="pyzor" name="15qR8x" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171355898.157:62417): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=6550 pid=31332 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171356001.339:62418): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356001.339:62419): login pid=31346 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171356001.340:62420): user pid=31345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356001.340:62421): login pid=31345 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171356001.343:62422): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356001.343:62423): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171356001.346:62424): user pid=31346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356001.346:62425): user pid=31346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171356001.363:62426): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171356001.363:62427): user pid=31345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171356301.679:62428): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356301.679:62429): login pid=31385 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171356301.683:62430): user pid=31385 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356301.683:62431): user pid=31385 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171356536.981:62432): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356536.981:62432): arch=c000003e syscall=2 success=yes exit=9 a0=334e120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171356537.582:62433): avc:  denied  { getattr } for  pid=31423 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356537.582:62433): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff7040aac0 a2=7fff7040aac0 a3=6c6280 items=0 ppid=29238 pid=31423 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171356537.582:62433):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171356537.582:62434): avc:  denied  { read } for  pid=31423 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356537.582:62434): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=31423 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171356542.544:62435): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171356542.544:62435): arch=c000003e syscall=62 success=yes exit=0 a0=7abf a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171356542.558:62436): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.558:62436): arch=c000003e syscall=2 success=yes exit=9 a0=334eca0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171356542.577:62437): avc:  denied  { write } for  pid=31419 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171356542.577:62437): avc:  denied  { add_name } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171356542.577:62437): avc:  denied  { create } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.577:62437): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171356542.578:62438): avc:  denied  { write } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.578:62438): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171356542.578:62438):  path="/home/dhighley/_7qH.-tX0FB.douglas"
>type=AVC msg=audit(1171356542.578:62439): avc:  denied  { getattr } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.578:62439): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffaa6a40a0 a2=7fffaa6a40a0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171356542.578:62439):  path="/home/dhighley/_7qH.-tX0FB.douglas"
>type=AVC msg=audit(1171356542.578:62440): avc:  denied  { link } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.578:62440): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=620240 a2=7fffaa6a3fc0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171356542.578:62441): avc:  denied  { remove_name } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171356542.578:62441): avc:  denied  { unlink } for  pid=31419 comm="procmail" name="_7qH.-tX0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356542.578:62441): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=620240 a2=7fffaa6a3fc0 a3=61b650 items=0 ppid=31414 pid=31419 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171356602.002:62442): user pid=31431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356602.002:62443): login pid=31431 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171356602.005:62444): user pid=31432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356602.005:62445): login pid=31432 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171356602.010:62446): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356602.010:62447): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171356602.013:62448): user pid=31432 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356602.013:62449): user pid=31432 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171356602.035:62450): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171356602.035:62451): user pid=31431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171356829.192:62452): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356829.192:62452): arch=c000003e syscall=2 success=yes exit=12 a0=3265960 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171356829.192:62453): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356829.192:62453): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171356829.192:62453):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171356834.917:62454): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356834.917:62454): arch=c000003e syscall=86 success=yes exit=0 a0=3350af0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171356834.917:62455): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171356834.917:62455): arch=c000003e syscall=87 success=yes exit=0 a0=3350af0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171356901.356:62456): user pid=31479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171356901.356:62457): login pid=31479 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171356901.359:62458): user pid=31479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171356901.359:62459): user pid=31479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171357201.697:62460): user pid=31515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357201.698:62461): login pid=31515 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171357201.698:62462): user pid=31516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357201.699:62463): login pid=31516 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171357201.701:62464): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357201.701:62465): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171357201.708:62466): user pid=31516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357201.708:62467): user pid=31516 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171357201.720:62468): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171357201.720:62469): user pid=31515 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171357261.036:62470): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357261.036:62471): login pid=31533 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171357261.041:62472): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357261.041:62473): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171357261.924:62474): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171357261.925:62475): user pid=31533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171357495.922:62476): avc:  denied  { search } for  pid=31591 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171357495.922:62476): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=31591 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171357501.934:62477): user pid=31593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357501.934:62478): login pid=31593 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171357501.938:62479): user pid=31593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357501.938:62480): user pid=31593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171357801.270:62481): user pid=31632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357801.270:62482): login pid=31632 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171357801.272:62483): user pid=31633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171357801.272:62484): login pid=31633 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171357801.274:62485): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357801.274:62486): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171357801.277:62487): user pid=31633 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171357801.277:62488): user pid=31633 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171357801.296:62489): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171357801.296:62490): user pid=31632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171358101.618:62491): user pid=31668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171358101.618:62492): login pid=31668 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171358101.622:62493): user pid=31668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171358101.622:62494): user pid=31668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171358401.953:62495): user pid=31707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171358401.953:62496): login pid=31707 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171358401.955:62497): user pid=31708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171358401.955:62498): login pid=31708 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171358401.956:62499): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171358401.956:62500): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171358401.959:62501): user pid=31708 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171358401.959:62502): user pid=31708 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171358401.985:62503): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171358401.985:62504): user pid=31707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171358701.291:62505): user pid=31743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171358701.291:62506): login pid=31743 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171358701.295:62507): user pid=31743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171358701.296:62508): user pid=31743 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171359001.613:62509): user pid=31784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359001.614:62510): login pid=31784 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171359001.616:62511): user pid=31785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359001.616:62512): login pid=31785 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171359001.618:62513): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359001.618:62514): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171359001.620:62515): user pid=31785 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359001.620:62516): user pid=31785 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171359001.640:62517): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171359001.640:62518): user pid=31784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171359301.946:62519): user pid=31827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359301.946:62520): login pid=31827 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171359301.951:62521): user pid=31827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359301.951:62522): user pid=31827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171359601.273:62523): user pid=31861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359601.273:62524): login pid=31861 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171359601.275:62525): user pid=31862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359601.275:62526): login pid=31862 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171359601.277:62527): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359601.277:62528): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171359601.283:62529): user pid=31862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359601.284:62530): user pid=31862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171359601.295:62531): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171359601.295:62532): user pid=31861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171359901.607:62533): user pid=31897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171359901.607:62534): login pid=31897 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171359901.611:62535): user pid=31897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171359901.612:62536): user pid=31897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171360201.929:62537): user pid=31934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360201.929:62538): login pid=31934 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171360201.930:62539): user pid=31935 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360201.930:62540): login pid=31935 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171360201.933:62541): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360201.933:62542): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171360201.935:62543): user pid=31935 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360201.935:62544): user pid=31935 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171360201.959:62545): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171360201.959:62546): user pid=31934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171360501.270:62547): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360501.270:62548): login pid=31978 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171360501.273:62549): user pid=31978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360501.273:62550): user pid=31978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171360801.598:62551): user pid=32013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360801.598:62552): login pid=32013 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171360801.600:62553): user pid=32014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360801.600:62554): login pid=32014 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171360801.601:62555): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360801.601:62556): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171360801.605:62557): user pid=32014 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360801.605:62558): user pid=32014 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171360801.622:62559): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171360801.623:62560): user pid=32013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171360861.930:62561): user pid=32028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171360861.930:62562): login pid=32028 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171360861.933:62563): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171360861.933:62564): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171360862.847:62565): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171360862.847:62566): user pid=32028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171361101.855:62567): user pid=32065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171361101.855:62568): login pid=32065 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171361101.859:62569): user pid=32065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171361101.859:62570): user pid=32065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171361401.181:62571): user pid=32102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171361401.182:62572): login pid=32102 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171361401.184:62573): user pid=32103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171361401.184:62574): login pid=32103 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171361401.188:62575): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171361401.188:62576): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171361401.190:62577): user pid=32103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171361401.190:62578): user pid=32103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171361401.209:62579): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171361401.210:62580): user pid=32102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171361587.890:62581): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171361587.890:62582): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171361701.897:62583): user pid=32147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171361701.897:62584): login pid=32147 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171361701.901:62585): user pid=32147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171361701.901:62586): user pid=32147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171362001.234:62587): user pid=32182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362001.234:62588): login pid=32182 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171362001.236:62589): user pid=32183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362001.236:62590): login pid=32183 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171362001.238:62591): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362001.238:62592): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171362001.249:62593): user pid=32183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362001.249:62594): user pid=32183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171362001.256:62595): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171362001.257:62596): user pid=32182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171362090.539:62597): avc:  denied  { search } for  pid=32211 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171362090.539:62597): avc:  denied  { write } for  pid=32211 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171362090.539:62597): avc:  denied  { add_name } for  pid=32211 comm="pyzor" name="keHunJ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171362090.539:62597): avc:  denied  { create } for  pid=32211 comm="pyzor" name="keHunJ" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362090.539:62597): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171362090.540:62598): avc:  denied  { getattr } for  pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362090.540:62598): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff573a9ec0 a2=7fff573a9ec0 a3=3 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362090.540:62598):  path="/tmp/keHunJ"
>type=AVC msg=audit(1171362090.540:62599): avc:  denied  { write } for  pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362090.540:62599): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362090.540:62599):  path="/tmp/keHunJ"
>type=AVC msg=audit(1171362090.540:62600): avc:  denied  { remove_name } for  pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171362090.540:62600): avc:  denied  { unlink } for  pid=32211 comm="pyzor" name="keHunJ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362090.540:62600): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d8340 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171362090.540:62601): avc:  denied  { read } for  pid=32211 comm="pyzor" name="tmpo_QONm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362090.540:62601): arch=c000003e syscall=0 success=yes exit=1052 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=32211 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362090.540:62601):  path=2F746D702F746D706F5F514F4E6D202864656C6574656429
>type=AVC msg=audit(1171362183.404:62602): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362183.404:62602): arch=c000003e syscall=2 success=yes exit=12 a0=3216920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362183.404:62603): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362183.404:62603): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362183.404:62603):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171362183.409:62604): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362183.409:62604): arch=c000003e syscall=2 success=yes exit=9 a0=3202090 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362184.093:62605): avc:  denied  { getattr } for  pid=32231 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362184.093:62605): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff41bf0850 a2=7fff41bf0850 a3=6c6280 items=0 ppid=29238 pid=32231 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362184.093:62605):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171362184.093:62606): avc:  denied  { read } for  pid=32231 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362184.093:62606): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=32231 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171362189.057:62607): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171362189.057:62607): arch=c000003e syscall=62 success=yes exit=0 a0=7de7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362189.248:62608): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.248:62608): arch=c000003e syscall=86 success=yes exit=0 a0=31cef70 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362189.248:62609): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.248:62609): arch=c000003e syscall=87 success=yes exit=0 a0=31cef70 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362189.249:62610): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.249:62610): arch=c000003e syscall=2 success=yes exit=9 a0=3058030 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171362189.263:62611): avc:  denied  { write } for  pid=32227 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171362189.263:62611): avc:  denied  { add_name } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171362189.263:62611): avc:  denied  { create } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.263:62611): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171362189.263:62612): avc:  denied  { write } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.263:62612): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362189.263:62612):  path="/home/phighley/_j3H.NGZ0FB.douglas"
>type=AVC msg=audit(1171362189.263:62613): avc:  denied  { getattr } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.263:62613): arch=c000003e syscall=4 success=yes exit=0 a0=61c7f0 a1=7fff3966b050 a2=7fff3966b050 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362189.263:62613):  path="/home/phighley/_j3H.NGZ0FB.douglas"
>type=AVC msg=audit(1171362189.264:62614): avc:  denied  { link } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.264:62614): arch=c000003e syscall=86 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fff3966af70 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171362189.264:62615): avc:  denied  { remove_name } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171362189.264:62615): avc:  denied  { unlink } for  pid=32227 comm="procmail" name="_j3H.NGZ0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.264:62615): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b530 a2=7fff3966af70 a3=61c7f0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171362189.264:62616): avc:  denied  { append } for  pid=32227 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.264:62616): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171362189.264:62617): avc:  denied  { lock } for  pid=32227 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171362189.264:62617): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=32222 pid=32227 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171362189.264:62617):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171362301.580:62618): user pid=32241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362301.581:62619): login pid=32241 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171362301.584:62620): user pid=32241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362301.584:62621): user pid=32241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171362601.912:62622): user pid=32280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362601.913:62623): login pid=32280 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171362601.915:62624): user pid=32281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362601.915:62625): login pid=32281 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171362601.915:62626): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362601.915:62627): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171362601.920:62628): user pid=32281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362601.920:62629): user pid=32281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171362601.935:62630): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171362601.935:62631): user pid=32280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171362901.242:62632): user pid=32317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171362901.242:62633): login pid=32317 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171362901.245:62634): user pid=32317 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171362901.245:62635): user pid=32317 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171363201.570:62636): user pid=32350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171363201.570:62637): login pid=32350 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171363201.572:62638): user pid=32351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171363201.572:62639): login pid=32351 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171363201.573:62640): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171363201.573:62641): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171363201.578:62642): user pid=32351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171363201.578:62643): user pid=32351 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171363201.603:62644): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171363201.604:62645): user pid=32350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171363501.899:62646): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171363501.900:62647): login pid=32386 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171363501.904:62648): user pid=32386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171363501.904:62649): user pid=32386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171363801.227:62650): user pid=32422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171363801.228:62651): login pid=32422 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171363801.230:62652): user pid=32423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171363801.230:62653): login pid=32423 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171363801.232:62654): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171363801.232:62655): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171363801.243:62656): user pid=32423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171363801.243:62657): user pid=32423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171363801.250:62658): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171363801.250:62659): user pid=32422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171364083.812:62660): avc:  denied  { getattr } for  pid=32470 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171364083.812:62660): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0d08b030 a2=7fff0d08b030 a3=6c6280 items=0 ppid=29238 pid=32470 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171364083.812:62660):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171364083.812:62661): avc:  denied  { read } for  pid=32470 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171364083.812:62661): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=32470 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171364088.810:62662): avc:  denied  { append } for  pid=32465 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171364088.810:62662): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=32460 pid=32465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171364101.572:62663): user pid=32474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364101.572:62664): login pid=32474 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171364101.576:62665): user pid=32474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364101.576:62666): user pid=32474 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171364401.894:62667): user pid=32507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364401.894:62668): login pid=32507 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171364401.896:62669): user pid=32508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364401.896:62670): login pid=32508 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171364401.898:62671): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364401.898:62672): login pid=32509 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171364401.899:62673): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364401.899:62674): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171364401.902:62675): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364401.902:62676): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171364401.910:62677): user pid=32509 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364401.910:62678): user pid=32509 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171364401.935:62679): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171364401.936:62680): user pid=32507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171364461.234:62681): user pid=32530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364461.235:62682): login pid=32530 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171364461.238:62683): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364461.238:62684): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171364462.120:62685): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171364462.120:62686): user pid=32530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171364701.127:62687): user pid=32566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171364701.128:62688): login pid=32566 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171364701.132:62689): user pid=32566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171364701.132:62690): user pid=32566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171365001.468:62691): user pid=32602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171365001.468:62692): user pid=32601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171365001.469:62693): login pid=32601 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171365001.469:62694): login pid=32602 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171365001.474:62695): user pid=32602 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365001.474:62696): user pid=32602 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171365001.478:62697): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365001.478:62698): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171365001.501:62699): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171365001.501:62700): user pid=32601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171365301.798:62701): user pid=32639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171365301.798:62702): login pid=32639 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171365301.801:62703): user pid=32639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365301.801:62704): user pid=32639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171365601.124:62705): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171365601.124:62706): login pid=32671 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171365601.126:62707): user pid=32672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171365601.126:62708): login pid=32672 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171365601.127:62709): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365601.127:62710): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171365601.131:62711): user pid=32672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365601.131:62712): user pid=32672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171365601.145:62713): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171365601.145:62714): user pid=32671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171365901.460:62715): user pid=32706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171365901.460:62716): login pid=32706 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171365901.463:62717): user pid=32706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171365901.463:62718): user pid=32706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171366201.795:62719): user pid=32743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171366201.795:62720): login pid=32743 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171366201.797:62721): user pid=32744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171366201.797:62722): login pid=32744 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171366201.798:62723): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171366201.798:62724): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171366201.802:62725): user pid=32744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171366201.803:62726): user pid=32744 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171366201.815:62727): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171366201.816:62728): user pid=32743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171366501.141:62729): user pid=313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171366501.142:62730): login pid=313 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171366501.146:62731): user pid=313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171366501.146:62732): user pid=313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171366801.475:62733): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171366801.475:62734): login pid=348 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171366801.477:62735): user pid=349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171366801.477:62736): login pid=349 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171366801.479:62737): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171366801.479:62738): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171366801.483:62739): user pid=349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171366801.483:62740): user pid=349 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171366801.502:62741): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171366801.502:62742): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171367101.814:62743): user pid=388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171367101.814:62744): login pid=388 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171367101.817:62745): user pid=388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171367101.817:62746): user pid=388 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171367401.139:62747): user pid=437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171367401.139:62748): login pid=437 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171367401.141:62749): user pid=438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171367401.141:62750): login pid=438 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171367401.143:62751): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171367401.143:62752): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171367401.149:62753): user pid=438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171367401.149:62754): user pid=438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171367401.167:62755): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171367401.167:62756): user pid=437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171367701.486:62757): user pid=479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171367701.486:62758): login pid=479 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171367701.490:62759): user pid=479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171367701.491:62760): user pid=479 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171367884.536:62761): avc:  denied  { search } for  pid=514 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171367884.536:62761): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171367884.537:62762): avc:  denied  { search } for  pid=514 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171367884.537:62762): avc:  denied  { write } for  pid=514 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171367884.537:62762): avc:  denied  { add_name } for  pid=514 comm="pyzor" name="EjqsIV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171367884.537:62762): avc:  denied  { create } for  pid=514 comm="pyzor" name="EjqsIV" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367884.537:62762): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171367884.537:62763): avc:  denied  { getattr } for  pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367884.537:62763): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff87ebb350 a2=7fff87ebb350 a3=3 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171367884.537:62763):  path="/tmp/EjqsIV"
>type=AVC msg=audit(1171367884.537:62764): avc:  denied  { write } for  pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367884.537:62764): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171367884.537:62764):  path="/tmp/EjqsIV"
>type=AVC msg=audit(1171367884.537:62765): avc:  denied  { remove_name } for  pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171367884.537:62765): avc:  denied  { unlink } for  pid=514 comm="pyzor" name="EjqsIV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367884.537:62765): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171367884.540:62766): avc:  denied  { read } for  pid=514 comm="pyzor" name="tmp2of2Ik" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367884.540:62766): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=514 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171367884.540:62766):  path=2F746D702F746D70326F6632496B202864656C6574656429
>type=AVC msg=audit(1171367889.530:62767): avc:  denied  { write } for  pid=510 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171367889.530:62767): avc:  denied  { add_name } for  pid=510 comm="procmail" name="_-H.Rfa0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171367889.530:62767): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171367889.530:62768): avc:  denied  { remove_name } for  pid=510 comm="procmail" name="_-H.Rfa0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171367889.530:62768): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=632520 a2=7fff2287c190 a3=61b650 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171367889.531:62769): avc:  denied  { append } for  pid=510 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171367889.531:62769): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=505 pid=510 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171368001.816:62770): user pid=525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368001.816:62771): login pid=525 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171368001.819:62772): user pid=526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368001.819:62773): login pid=526 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171368001.822:62774): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368001.822:62775): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171368001.824:62776): user pid=526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368001.824:62777): user pid=526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171368001.851:62778): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171368001.852:62779): user pid=525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171368061.146:62780): user pid=541 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368061.146:62781): login pid=541 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171368061.150:62782): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368061.150:62783): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171368062.032:62784): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171368062.032:62785): user pid=541 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171368121.036:62786): user pid=563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368121.037:62787): login pid=563 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171368121.041:62788): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368121.041:62789): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171368301.041:62790): user pid=597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368301.041:62791): login pid=597 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171368301.044:62792): user pid=597 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368301.044:62793): user pid=597 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171368601.372:62794): user pid=631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368601.372:62795): login pid=631 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171368601.373:62796): user pid=632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368601.373:62797): login pid=632 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171368601.378:62798): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368601.378:62799): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171368601.383:62800): user pid=632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368601.383:62801): user pid=632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171368601.397:62802): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171368601.398:62803): user pid=631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171368789.377:62804): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368789.377:62804): arch=c000003e syscall=2 success=yes exit=12 a0=32bfbd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368789.377:62805): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368789.377:62805): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171368789.377:62805):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171368789.396:62806): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368789.396:62806): arch=c000003e syscall=2 success=yes exit=9 a0=3559bd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368790.236:62807): avc:  denied  { getattr } for  pid=671 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368790.236:62807): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe42de280 a2=7fffe42de280 a3=6c6280 items=0 ppid=29238 pid=671 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171368790.236:62807):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171368790.236:62808): avc:  denied  { read } for  pid=671 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368790.236:62808): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=671 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171368795.198:62809): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171368795.198:62809): arch=c000003e syscall=62 success=yes exit=0 a0=29f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368795.206:62810): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.206:62810): arch=c000003e syscall=86 success=yes exit=0 a0=30e5320 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368795.206:62811): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.206:62811): arch=c000003e syscall=87 success=yes exit=0 a0=30e5320 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368795.207:62812): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.207:62812): arch=c000003e syscall=2 success=yes exit=9 a0=30c4700 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171368795.232:62813): avc:  denied  { create } for  pid=667 comm="procmail" name="_bK.bta0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.232:62813): arch=c000003e syscall=2 success=yes exit=6 a0=623890 a1=c1 a2=124 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171368795.232:62814): avc:  denied  { write } for  pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.232:62814): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171368795.232:62814):  path="/home/dhighley/_bK.bta0FB.douglas"
>type=AVC msg=audit(1171368795.233:62815): avc:  denied  { getattr } for  pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.233:62815): arch=c000003e syscall=4 success=yes exit=0 a0=623890 a1=7fff08aae4a0 a2=7fff08aae4a0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171368795.233:62815):  path="/home/dhighley/_bK.bta0FB.douglas"
>type=AVC msg=audit(1171368795.233:62816): avc:  denied  { link } for  pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.233:62816): arch=c000003e syscall=86 success=yes exit=0 a0=623890 a1=61b520 a2=7fff08aae3c0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171368795.233:62817): avc:  denied  { unlink } for  pid=667 comm="procmail" name="_bK.bta0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171368795.233:62817): arch=c000003e syscall=87 success=yes exit=0 a0=623890 a1=61b520 a2=7fff08aae3c0 a3=623890 items=0 ppid=662 pid=667 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171368901.725:62818): user pid=683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171368901.725:62819): login pid=683 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171368901.728:62820): user pid=683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171368901.728:62821): user pid=683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171369201.050:62822): user pid=728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171369201.050:62823): login pid=728 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171369201.052:62824): user pid=729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171369201.052:62825): login pid=729 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171369201.055:62826): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171369201.055:62827): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171369201.057:62828): user pid=729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171369201.057:62829): user pid=729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171369201.087:62830): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171369201.088:62831): user pid=728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171369501.380:62832): user pid=766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171369501.381:62833): login pid=766 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171369501.385:62834): user pid=766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171369501.385:62835): user pid=766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171369801.704:62836): user pid=801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171369801.705:62837): login pid=801 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171369801.707:62838): user pid=802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171369801.707:62839): login pid=802 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171369801.711:62840): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171369801.711:62841): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171369801.713:62842): user pid=802 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171369801.713:62843): user pid=802 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171369801.733:62844): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171369801.734:62845): user pid=801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171370101.052:62846): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171370101.052:62847): login pid=839 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171370101.056:62848): user pid=839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171370101.056:62849): user pid=839 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171370401.394:62850): user pid=874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171370401.394:62851): login pid=874 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171370401.396:62852): user pid=875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171370401.396:62853): login pid=875 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171370401.397:62854): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171370401.398:62855): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171370401.408:62856): user pid=875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171370401.409:62857): user pid=875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171370401.416:62858): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171370401.417:62859): user pid=874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171370701.730:62860): user pid=914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171370701.731:62861): login pid=914 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171370701.735:62862): user pid=914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171370701.735:62863): user pid=914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171371001.067:62864): user pid=948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371001.067:62865): login pid=948 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171371001.068:62866): user pid=947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371001.068:62867): login pid=947 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171371001.073:62868): user pid=948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371001.073:62869): user pid=948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171371001.079:62870): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371001.079:62871): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171371001.100:62872): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171371001.100:62873): user pid=947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171371092.902:62874): avc:  denied  { search } for  pid=977 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171371092.902:62874): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171371092.903:62875): avc:  denied  { create } for  pid=977 comm="pyzor" name="j0fYC9" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171371092.903:62875): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171371092.903:62876): avc:  denied  { getattr } for  pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171371092.903:62876): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe0996240 a2=7fffe0996240 a3=2 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171371092.903:62876):  path="/tmp/j0fYC9"
>type=AVC msg=audit(1171371092.903:62877): avc:  denied  { write } for  pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171371092.903:62877): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171371092.903:62877):  path="/tmp/j0fYC9"
>type=AVC msg=audit(1171371092.904:62878): avc:  denied  { unlink } for  pid=977 comm="pyzor" name="j0fYC9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171371092.904:62878): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171371092.905:62879): avc:  denied  { read } for  pid=977 comm="pyzor" name="tmpKwCXrs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171371092.905:62879): arch=c000003e syscall=0 success=yes exit=390 a0=4 a1=2aaaaf34d000 a2=1000 a3=4c items=0 ppid=29238 pid=977 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171371092.905:62879):  path=2F746D702F746D704B7743587273202864656C6574656429
>type=USER_ACCT msg=audit(1171371301.415:62880): user pid=997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371301.415:62881): login pid=997 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171371301.419:62882): user pid=997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371301.419:62883): user pid=997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171371601.755:62884): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171371601.756:62885): user pid=4707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371601.756:62886): login pid=4706 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171371601.756:62887): login pid=4707 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171371601.761:62888): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371601.761:62889): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171371601.763:62890): user pid=4707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371601.763:62891): user pid=4707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171371602.160:62892): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171371602.160:62893): user pid=4706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171371661.165:62894): user pid=4877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371661.165:62895): login pid=4877 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171371661.168:62896): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371661.168:62897): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171371662.079:62898): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171371662.080:62899): user pid=4877 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171371901.085:62900): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171371901.086:62901): login pid=5532 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171371901.092:62902): user pid=5532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171371901.092:62903): user pid=5532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171372184.676:62904): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171372184.676:62905): user pid=563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171372201.679:62906): user pid=6160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171372201.679:62907): login pid=6160 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171372201.682:62908): user pid=6161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171372201.682:62909): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171372201.682:62910): login pid=6161 uid=0 old auid=4294967295 new auid=111
>type=CRED_ACQ msg=audit(1171372201.682:62911): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171372201.695:62912): user pid=6161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171372201.695:62913): user pid=6161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171372201.713:62914): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171372201.713:62915): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171372267.823:62916): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372267.823:62916): arch=c000003e syscall=2 success=yes exit=12 a0=333e660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372267.823:62917): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372267.823:62917): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372267.823:62917):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171372267.836:62918): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372267.836:62918): arch=c000003e syscall=2 success=yes exit=9 a0=33caa40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372268.504:62919): avc:  denied  { search } for  pid=6188 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171372268.504:62919): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171372268.505:62920): avc:  denied  { getattr } for  pid=6188 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.505:62920): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc6397340 a2=7fffc6397340 a3=6c6280 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372268.505:62920):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171372268.505:62921): avc:  denied  { read } for  pid=6188 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.505:62921): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171372268.506:62922): avc:  denied  { search } for  pid=6188 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171372268.506:62922): avc:  denied  { write } for  pid=6188 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171372268.506:62922): avc:  denied  { add_name } for  pid=6188 comm="pyzor" name="NOic2Q" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171372268.506:62922): avc:  denied  { create } for  pid=6188 comm="pyzor" name="NOic2Q" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.506:62922): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171372268.506:62923): avc:  denied  { getattr } for  pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.506:62923): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc6395c40 a2=7fffc6395c40 a3=2 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372268.506:62923):  path="/tmp/NOic2Q"
>type=AVC msg=audit(1171372268.506:62924): avc:  denied  { write } for  pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.506:62924): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372268.506:62924):  path="/tmp/NOic2Q"
>type=AVC msg=audit(1171372268.507:62925): avc:  denied  { remove_name } for  pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171372268.507:62925): avc:  denied  { unlink } for  pid=6188 comm="pyzor" name="NOic2Q" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.507:62925): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171372268.513:62926): avc:  denied  { read } for  pid=6188 comm="pyzor" name="tmpImUxLt" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372268.513:62926): arch=c000003e syscall=0 success=yes exit=4096 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=6188 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372268.513:62926):  path=2F746D702F746D70496D55784C74202864656C6574656429
>type=AVC msg=audit(1171372273.465:62927): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171372273.465:62927): arch=c000003e syscall=62 success=yes exit=0 a0=182c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372273.666:62928): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.666:62928): arch=c000003e syscall=86 success=yes exit=0 a0=30d4600 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372273.666:62929): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.666:62929): arch=c000003e syscall=87 success=yes exit=0 a0=30d4600 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372273.667:62930): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.667:62930): arch=c000003e syscall=2 success=yes exit=9 a0=35ecfb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171372273.696:62931): avc:  denied  { write } for  pid=6184 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171372273.696:62931): avc:  denied  { add_name } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171372273.696:62931): avc:  denied  { create } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.696:62931): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171372273.697:62932): avc:  denied  { write } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.697:62932): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372273.697:62932):  path="/home/dhighley/_ogB.xjb0FB.douglas"
>type=AVC msg=audit(1171372273.697:62933): avc:  denied  { getattr } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.697:62933): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3610ab00 a2=7fff3610ab00 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171372273.697:62933):  path="/home/dhighley/_ogB.xjb0FB.douglas"
>type=AVC msg=audit(1171372273.697:62934): avc:  denied  { link } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.697:62934): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e6d0 a2=7fff3610aa20 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171372273.697:62935): avc:  denied  { remove_name } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171372273.697:62935): avc:  denied  { unlink } for  pid=6184 comm="procmail" name="_ogB.xjb0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.697:62935): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e6d0 a2=7fff3610aa20 a3=61b650 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171372273.697:62936): avc:  denied  { append } for  pid=6184 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171372273.697:62936): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6179 pid=6184 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171372387.977:62937): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171372387.978:62938): user pid=32508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171372501.982:62939): user pid=6209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171372501.983:62940): login pid=6209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171372501.989:62941): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171372501.989:62942): user pid=6209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171372801.319:62943): user pid=6244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171372801.319:62944): login pid=6244 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171372801.319:62945): user pid=6243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171372801.319:62946): login pid=6243 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171372801.325:62947): user pid=6244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171372801.325:62948): user pid=6244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171372801.328:62949): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171372801.328:62950): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171372801.351:62951): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171372801.352:62952): user pid=6243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171373101.648:62953): user pid=6281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171373101.648:62954): login pid=6281 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171373101.652:62955): user pid=6281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171373101.652:62956): user pid=6281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171373401.976:62957): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171373401.977:62958): login pid=6319 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171373401.978:62959): user pid=6318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171373401.978:62960): login pid=6318 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171373401.982:62961): user pid=6319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171373401.982:62962): user pid=6319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171373401.988:62963): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171373401.989:62964): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171373402.011:62965): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171373402.012:62966): user pid=6318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171373701.311:62967): user pid=6354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171373701.311:62968): login pid=6354 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171373701.315:62969): user pid=6354 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171373701.315:62970): user pid=6354 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171374001.641:62971): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374001.642:62972): login pid=6389 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171374001.644:62973): user pid=6390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374001.645:62974): login pid=6390 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171374001.648:62975): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374001.648:62976): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171374001.650:62977): user pid=6390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374001.650:62978): user pid=6390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171374001.677:62979): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171374001.677:62980): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171374301.982:62981): user pid=6428 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374301.982:62982): login pid=6428 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171374301.986:62983): user pid=6428 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374301.986:62984): user pid=6428 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171374601.307:62985): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374601.308:62986): login pid=6462 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171374601.310:62987): user pid=6463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374601.310:62988): login pid=6463 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171374601.311:62989): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374601.311:62990): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171374601.319:62991): user pid=6463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374601.319:62992): user pid=6463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171374601.328:62993): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171374601.328:62994): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171374853.903:62995): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.903:62995): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171374853.903:62995):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171374853.904:62996): avc:  denied  { link } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.904:62996): arch=c000003e syscall=86 success=yes exit=0 a0=35ec8e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374853.904:62997): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.904:62997): arch=c000003e syscall=87 success=yes exit=0 a0=35ec8e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374853.905:62998): avc:  denied  { write } for  pid=29238 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.905:62998): arch=c000003e syscall=2 success=yes exit=9 a0=3350b20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374853.924:62999): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.924:62999): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374853.925:63000): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374853.925:63000): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374860.819:63001): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374860.819:63001): arch=c000003e syscall=1 success=yes exit=1800 a0=a a1=31653d0 a2=708 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171374860.819:63001):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171374860.831:63002): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374860.831:63002): arch=c000003e syscall=2 success=yes exit=9 a0=31d1980 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374861.556:63003): avc:  denied  { getattr } for  pid=6505 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374861.556:63003): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff204bb460 a2=7fff204bb460 a3=6c6280 items=0 ppid=29238 pid=6505 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171374861.556:63003):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171374861.556:63004): avc:  denied  { read } for  pid=6505 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374861.556:63004): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6505 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171374866.519:63005): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171374866.519:63005): arch=c000003e syscall=62 success=yes exit=0 a0=1969 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171374866.563:63006): avc:  denied  { write } for  pid=6501 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171374866.563:63006): avc:  denied  { add_name } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171374866.563:63006): avc:  denied  { create } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374866.563:63006): arch=c000003e syscall=2 success=yes exit=6 a0=61cfc0 a1=c1 a2=124 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171374866.563:63007): avc:  denied  { write } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374866.563:63007): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171374866.563:63007):  path="/home/dhighley/_llB.SMc0FB.douglas"
>type=AVC msg=audit(1171374866.563:63008): avc:  denied  { getattr } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374866.563:63008): arch=c000003e syscall=4 success=yes exit=0 a0=61cfc0 a1=7fff2d698090 a2=7fff2d698090 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171374866.563:63008):  path="/home/dhighley/_llB.SMc0FB.douglas"
>type=AVC msg=audit(1171374866.563:63009): avc:  denied  { link } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374866.563:63009): arch=c000003e syscall=86 success=yes exit=0 a0=61cfc0 a1=61d1c0 a2=7fff2d697fb0 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171374866.563:63010): avc:  denied  { remove_name } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171374866.563:63010): avc:  denied  { unlink } for  pid=6501 comm="procmail" name="_llB.SMc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171374866.563:63010): arch=c000003e syscall=87 success=yes exit=0 a0=61cfc0 a1=61d1c0 a2=7fff2d697fb0 a3=61cfc0 items=0 ppid=6496 pid=6501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171374901.649:63011): user pid=6510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171374901.649:63012): login pid=6510 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171374901.653:63013): user pid=6510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171374901.653:63014): user pid=6510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171375201.976:63015): user pid=6546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375201.977:63016): login pid=6546 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171375201.979:63017): user pid=6547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375201.979:63018): login pid=6547 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171375201.981:63019): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375201.981:63020): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171375201.983:63021): user pid=6548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375201.984:63022): login pid=6548 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171375201.990:63023): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375201.991:63024): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171375201.992:63025): user pid=6548 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375201.992:63026): user pid=6548 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171375202.011:63027): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171375202.011:63028): user pid=6546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171375233.522:63029): avc:  denied  { search } for  pid=6577 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171375233.522:63029): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375233.523:63030): avc:  denied  { create } for  pid=6577 comm="pyzor" name="RIg2wa" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375233.523:63030): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375233.523:63031): avc:  denied  { getattr } for  pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375233.523:63031): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3d6abb40 a2=7fff3d6abb40 a3=3 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375233.523:63031):  path="/tmp/RIg2wa"
>type=AVC msg=audit(1171375233.523:63032): avc:  denied  { write } for  pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375233.523:63032): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375233.523:63032):  path="/tmp/RIg2wa"
>type=AVC msg=audit(1171375233.523:63033): avc:  denied  { unlink } for  pid=6577 comm="pyzor" name="RIg2wa" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375233.523:63033): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375233.525:63034): avc:  denied  { read } for  pid=6577 comm="pyzor" name="tmpxEU7qT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375233.525:63034): arch=c000003e syscall=0 success=yes exit=2427 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=6577 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375233.525:63034):  path=2F746D702F746D70784555377154202864656C6574656429
>type=USER_ACCT msg=audit(1171375261.329:63035): user pid=6582 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375261.329:63036): login pid=6582 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171375261.332:63037): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375261.332:63038): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171375262.233:63039): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171375262.234:63040): user pid=6582 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171375501.240:63041): user pid=6624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375501.241:63042): login pid=6624 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171375501.245:63043): user pid=6624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375501.245:63044): user pid=6624 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171375634.749:63045): avc:  denied  { search } for  pid=6657 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171375634.749:63045): avc:  denied  { write } for  pid=6657 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171375634.749:63045): avc:  denied  { add_name } for  pid=6657 comm="pyzor" name="P7mPla" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171375634.749:63045): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=6657 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375634.750:63046): avc:  denied  { remove_name } for  pid=6657 comm="pyzor" name="P7mPla" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171375634.750:63046): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6657 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375639.747:63047): avc:  denied  { write } for  pid=6653 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171375639.747:63047): avc:  denied  { add_name } for  pid=6653 comm="procmail" name="_9nB.XYc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171375639.747:63047): arch=c000003e syscall=2 success=yes exit=6 a0=61fe20 a1=c1 a2=124 a3=61fe20 items=0 ppid=6648 pid=6653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171375639.748:63048): avc:  denied  { remove_name } for  pid=6653 comm="procmail" name="_9nB.XYc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171375639.748:63048): arch=c000003e syscall=87 success=yes exit=0 a0=61fe20 a1=61fe00 a2=7fff5e0eba00 a3=61fe20 items=0 ppid=6648 pid=6653 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171375801.578:63049): user pid=6673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375801.579:63050): login pid=6673 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171375801.579:63051): user pid=6674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171375801.579:63052): login pid=6674 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171375801.584:63053): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375801.584:63054): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171375801.589:63055): user pid=6674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171375801.589:63056): user pid=6674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171375801.607:63057): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171375801.608:63058): user pid=6673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171375886.488:63059): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375886.488:63059): arch=c000003e syscall=2 success=yes exit=9 a0=3038de0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171375887.218:63060): avc:  denied  { getattr } for  pid=6699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375887.218:63060): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbc4143c0 a2=7fffbc4143c0 a3=6c6280 items=0 ppid=29238 pid=6699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375887.218:63060):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171375887.218:63061): avc:  denied  { read } for  pid=6699 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375887.218:63061): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=6699 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171375892.180:63062): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171375892.180:63062): arch=c000003e syscall=62 success=yes exit=0 a0=1a2b a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171375892.328:63063): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.328:63063): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375892.328:63063):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171375892.328:63064): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.328:63064): arch=c000003e syscall=86 success=yes exit=0 a0=2022f20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171375892.328:63065): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.328:63065): arch=c000003e syscall=87 success=yes exit=0 a0=2022f20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171375892.329:63066): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.329:63066): arch=c000003e syscall=2 success=yes exit=9 a0=329bf20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171375892.339:63067): avc:  denied  { create } for  pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.339:63067): arch=c000003e syscall=2 success=yes exit=6 a0=61c890 a1=c1 a2=124 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171375892.339:63068): avc:  denied  { write } for  pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.339:63068): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375892.339:63068):  path="/home/dhighley/_noB.Ucc0FB.douglas"
>type=AVC msg=audit(1171375892.340:63069): avc:  denied  { getattr } for  pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.340:63069): arch=c000003e syscall=4 success=yes exit=0 a0=61c890 a1=7fff58dd67c0 a2=7fff58dd67c0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171375892.340:63069):  path="/home/dhighley/_noB.Ucc0FB.douglas"
>type=AVC msg=audit(1171375892.340:63070): avc:  denied  { link } for  pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.340:63070): arch=c000003e syscall=86 success=yes exit=0 a0=61c890 a1=61b530 a2=7fff58dd66e0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171375892.340:63071): avc:  denied  { unlink } for  pid=6695 comm="procmail" name="_noB.Ucc0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171375892.340:63071): arch=c000003e syscall=87 success=yes exit=0 a0=61c890 a1=61b530 a2=7fff58dd66e0 a3=61c890 items=0 ppid=6692 pid=6695 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171376015.991:63072): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171376015.991:63072): arch=c000003e syscall=2 success=yes exit=12 a0=32668e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171376101.928:63073): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171376101.928:63074): login pid=6734 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171376101.931:63075): user pid=6734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171376101.932:63076): user pid=6734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171376401.257:63077): user pid=6769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171376401.257:63078): login pid=6769 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171376401.257:63079): user pid=6770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171376401.258:63080): login pid=6770 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171376401.262:63081): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171376401.262:63082): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171376401.265:63083): user pid=6770 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171376401.265:63084): user pid=6770 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171376401.293:63085): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171376401.293:63086): user pid=6769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171376701.590:63087): user pid=6808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171376701.590:63088): login pid=6808 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171376701.594:63089): user pid=6808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171376701.594:63090): user pid=6808 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171377001.919:63091): user pid=6865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377001.919:63092): login pid=6865 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171377001.921:63093): user pid=6866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377001.921:63094): login pid=6866 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171377001.923:63095): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377001.923:63096): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171377001.925:63097): user pid=6866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377001.925:63098): user pid=6866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171377001.945:63099): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171377001.945:63100): user pid=6865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171377036.995:63101): avc:  denied  { create } for  pid=6887 comm="pyzor" name="pnkQw5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377036.995:63101): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171377036.996:63102): avc:  denied  { getattr } for  pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377036.996:63102): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff74471d20 a2=7fff74471d20 a3=2 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171377036.996:63102):  path="/tmp/pnkQw5"
>type=AVC msg=audit(1171377036.996:63103): avc:  denied  { write } for  pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377036.996:63103): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171377036.996:63103):  path="/tmp/pnkQw5"
>type=AVC msg=audit(1171377036.996:63104): avc:  denied  { unlink } for  pid=6887 comm="pyzor" name="pnkQw5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377036.996:63104): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171377036.997:63105): avc:  denied  { read } for  pid=6887 comm="pyzor" name="tmpnfGqaS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377036.997:63105): arch=c000003e syscall=0 success=yes exit=681 a0=4 a1=2aaaaf34d000 a2=1000 a3=83 items=0 ppid=29238 pid=6887 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171377036.997:63105):  path=2F746D702F746D706E6647716153202864656C6574656429
>type=AVC msg=audit(1171377085.727:63106): avc:  denied  { append } for  pid=6898 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171377085.727:63106): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6895 pid=6898 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171377301.256:63107): user pid=6922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377301.257:63108): login pid=6922 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171377301.260:63109): user pid=6922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377301.261:63110): user pid=6922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171377444.646:63111): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171377444.646:63112): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171377444.657:63113): user pid=6958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171377444.679:63114): login pid=6958 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171377444.679:63115): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171377444.767:63116): user pid=6962 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_REFR msg=audit(1171377444.776:63117): user pid=6962 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1171377534.662:63118): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171377534.662:63119): user pid=6958 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171377601.584:63120): user pid=7026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377601.584:63121): login pid=7026 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171377601.586:63122): user pid=7027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377601.586:63123): login pid=7027 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171377601.588:63124): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377601.588:63125): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171377601.598:63126): user pid=7027 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377601.598:63127): user pid=7027 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171377601.611:63128): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171377601.611:63129): user pid=7026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171377619.940:63130): user pid=7039 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171377619.943:63131): user pid=7039 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171377619.944:63132): login pid=7039 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171377619.944:63133): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171377619.955:63134): user pid=7044 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171377620.051:63135): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1171377687.237:63136): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171377687.237:63137): user pid=7039 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171377693.843:63138): user pid=7090 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171377693.845:63139): user pid=7090 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171377693.846:63140): login pid=7090 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171377693.846:63141): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171377693.857:63142): user pid=7093 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171377693.945:63143): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1171377702.612:63144): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171377702.612:63145): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171377702.628:63146): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171377702.628:63147): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171377901.920:63148): user pid=7197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171377901.921:63149): login pid=7197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171377901.925:63150): user pid=7197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171377901.925:63151): user pid=7197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171377910.586:63152): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171377910.586:63153): user pid=7126 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171377912.948:63154): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171377912.949:63155): user pid=7090 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171378201.247:63156): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378201.247:63157): login pid=7233 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171378201.249:63158): user pid=7234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378201.250:63159): login pid=7234 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171378201.252:63160): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378201.252:63161): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171378201.256:63162): user pid=7234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378201.256:63163): user pid=7234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171378201.272:63164): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171378201.272:63165): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171378501.595:63166): user pid=7272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378501.595:63167): login pid=7272 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171378501.598:63168): user pid=7272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378501.598:63169): user pid=7272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171378618.903:63170): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378618.903:63170): arch=c000003e syscall=2 success=yes exit=12 a0=325d500 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171378618.903:63171): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378618.903:63171): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378618.903:63171):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171378618.909:63172): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378618.909:63172): arch=c000003e syscall=2 success=yes exit=9 a0=329be40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171378619.627:63173): avc:  denied  { search } for  pid=7304 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171378619.627:63173): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171378619.628:63174): avc:  denied  { getattr } for  pid=7304 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.628:63174): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff6c7356e0 a2=7fff6c7356e0 a3=6c6280 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378619.628:63174):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171378619.628:63175): avc:  denied  { read } for  pid=7304 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.628:63175): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171378619.628:63176): avc:  denied  { search } for  pid=7304 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171378619.628:63176): avc:  denied  { write } for  pid=7304 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171378619.628:63176): avc:  denied  { add_name } for  pid=7304 comm="pyzor" name="2xEdKE" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171378619.628:63176): avc:  denied  { create } for  pid=7304 comm="pyzor" name="2xEdKE" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.628:63176): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171378619.629:63177): avc:  denied  { getattr } for  pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.629:63177): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6c733fe0 a2=7fff6c733fe0 a3=2 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378619.629:63177):  path="/tmp/2xEdKE"
>type=AVC msg=audit(1171378619.629:63178): avc:  denied  { write } for  pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.629:63178): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378619.629:63178):  path="/tmp/2xEdKE"
>type=AVC msg=audit(1171378619.629:63179): avc:  denied  { remove_name } for  pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171378619.629:63179): avc:  denied  { unlink } for  pid=7304 comm="pyzor" name="2xEdKE" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.629:63179): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171378619.634:63180): avc:  denied  { read } for  pid=7304 comm="pyzor" name="tmp9vGI05" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378619.634:63180): arch=c000003e syscall=0 success=yes exit=759 a0=4 a1=2aaaaf34d000 a2=1000 a3=b8 items=0 ppid=29238 pid=7304 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378619.634:63180):  path=2F746D702F746D70397647493035202864656C6574656429
>type=AVC msg=audit(1171378624.589:63181): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171378624.589:63181): arch=c000003e syscall=62 success=yes exit=0 a0=1c88 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171378624.640:63182): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378624.640:63182): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171378624.640:63182):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171378624.641:63183): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378624.641:63183): arch=c000003e syscall=86 success=yes exit=0 a0=321a270 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171378624.641:63184): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378624.641:63184): arch=c000003e syscall=87 success=yes exit=0 a0=321a270 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171378624.642:63185): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171378624.642:63185): arch=c000003e syscall=2 success=yes exit=9 a0=2fd3ef0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171378801.935:63186): user pid=7323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378801.935:63187): login pid=7323 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171378801.936:63188): user pid=7324 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378801.937:63189): login pid=7324 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171378801.938:63190): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378801.938:63191): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171378801.950:63192): user pid=7324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378801.950:63193): user pid=7324 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171378801.963:63194): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171378801.963:63195): user pid=7323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171378861.278:63196): user pid=7338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171378861.279:63197): login pid=7338 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171378861.282:63198): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171378861.282:63199): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171378862.199:63200): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171378862.199:63201): user pid=7338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171379101.206:63202): user pid=7377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171379101.207:63203): login pid=7377 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171379101.211:63204): user pid=7377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171379101.211:63205): user pid=7377 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171379401.540:63206): user pid=7420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171379401.540:63207): login pid=7420 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171379401.542:63208): user pid=7421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171379401.543:63209): login pid=7421 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171379401.543:63210): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171379401.543:63211): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171379401.555:63212): user pid=7421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171379401.555:63213): user pid=7421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171379401.562:63214): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171379401.562:63215): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171379568.624:63216): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379568.624:63216): arch=c000003e syscall=2 success=yes exit=12 a0=32b7d20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171379569.762:63217): avc:  denied  { search } for  pid=7455 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171379569.762:63217): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7455 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171379575.270:63218): avc:  denied  { write } for  pid=7451 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171379575.270:63218): avc:  denied  { add_name } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171379575.270:63218): avc:  denied  { create } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.270:63218): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171379575.270:63219): avc:  denied  { write } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.270:63219): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171379575.270:63219):  path="/home/dhighley/_b0B.3Vd0FB.douglas"
>type=AVC msg=audit(1171379575.271:63220): avc:  denied  { getattr } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.271:63220): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff2c15eb50 a2=7fff2c15eb50 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171379575.271:63220):  path="/home/dhighley/_b0B.3Vd0FB.douglas"
>type=AVC msg=audit(1171379575.271:63221): avc:  denied  { link } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.271:63221): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f530 a2=7fff2c15ea70 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171379575.271:63222): avc:  denied  { remove_name } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171379575.271:63222): avc:  denied  { unlink } for  pid=7451 comm="procmail" name="_b0B.3Vd0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.271:63222): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f530 a2=7fff2c15ea70 a3=61b650 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171379575.271:63223): avc:  denied  { append } for  pid=7451 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379575.271:63223): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7446 pid=7451 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171379701.883:63224): user pid=7468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171379701.884:63225): login pid=7468 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171379701.886:63226): user pid=7468 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171379701.887:63227): user pid=7468 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171379709.062:63228): avc:  denied  { create } for  pid=7485 comm="pyzor" name="4323Br" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379709.062:63228): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171379709.062:63229): avc:  denied  { getattr } for  pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379709.062:63229): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd1c3a0d0 a2=7fffd1c3a0d0 a3=3 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171379709.062:63229):  path="/tmp/4323Br"
>type=AVC msg=audit(1171379709.062:63230): avc:  denied  { write } for  pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379709.062:63230): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171379709.062:63230):  path="/tmp/4323Br"
>type=AVC msg=audit(1171379709.062:63231): avc:  denied  { unlink } for  pid=7485 comm="pyzor" name="4323Br" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379709.062:63231): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171379709.064:63232): avc:  denied  { read } for  pid=7485 comm="pyzor" name="tmp3u53_S" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379709.064:63232): arch=c000003e syscall=0 success=yes exit=1490 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=7485 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171379709.064:63232):  path=2F746D702F746D70337535335F53202864656C6574656429
>type=AVC msg=audit(1171379714.066:63233): avc:  denied  { append } for  pid=7481 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171379714.066:63233): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7478 pid=7481 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171380001.209:63234): user pid=7526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380001.210:63235): login pid=7526 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171380001.211:63236): user pid=7525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380001.212:63237): login pid=7525 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171380001.214:63238): user pid=7526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380001.214:63239): user pid=7526 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171380001.224:63240): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380001.224:63241): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171380001.244:63242): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171380001.245:63243): user pid=7525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171380301.542:63244): user pid=7562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380301.542:63245): login pid=7562 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171380301.545:63246): user pid=7562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380301.545:63247): user pid=7562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171380601.878:63248): user pid=7597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380601.878:63249): login pid=7597 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171380601.880:63250): user pid=7598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380601.880:63251): login pid=7598 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171380601.882:63252): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380601.882:63253): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171380601.891:63254): user pid=7598 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380601.892:63255): user pid=7598 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171380601.901:63256): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171380601.902:63257): user pid=7597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171380781.233:63258): avc:  denied  { search } for  pid=7639 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171380781.233:63258): avc:  denied  { write } for  pid=7639 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171380781.233:63258): avc:  denied  { add_name } for  pid=7639 comm="pyzor" name="n9lvQ4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171380781.233:63258): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=7639 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171380781.233:63259): avc:  denied  { remove_name } for  pid=7639 comm="pyzor" name="n9lvQ4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171380781.233:63259): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=7639 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171380786.606:63260): avc:  denied  { write } for  pid=7635 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171380786.606:63260): avc:  denied  { add_name } for  pid=7635 comm="procmail" name="_T3B.yod0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171380786.606:63260): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7631 pid=7635 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171380786.607:63261): avc:  denied  { remove_name } for  pid=7635 comm="procmail" name="_T3B.yod0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171380786.607:63261): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=621700 a2=7fff78a64380 a3=61b650 items=0 ppid=7631 pid=7635 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171380901.214:63262): user pid=7650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171380901.214:63263): login pid=7650 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171380901.218:63264): user pid=7650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171380901.218:63265): user pid=7650 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171381201.546:63266): user pid=7684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171381201.546:63267): login pid=7684 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171381201.549:63268): user pid=7685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171381201.549:63269): login pid=7685 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171381201.552:63270): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171381201.552:63271): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171381201.554:63272): user pid=7685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171381201.554:63273): user pid=7685 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171381201.581:63274): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171381201.581:63275): user pid=7684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171381501.885:63276): user pid=7722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171381501.885:63277): login pid=7722 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171381501.889:63278): user pid=7722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171381501.889:63279): user pid=7722 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171381801.212:63280): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171381801.212:63281): login pid=7756 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171381801.214:63282): user pid=7757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171381801.214:63283): login pid=7757 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171381801.216:63284): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171381801.216:63285): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171381801.220:63286): user pid=7757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171381801.220:63287): user pid=7757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171381801.234:63288): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171381801.235:63289): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171382022.346:63290): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382022.346:63290): arch=c000003e syscall=2 success=yes exit=12 a0=33ceaf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171382022.346:63291): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382022.346:63291): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171382022.346:63291):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171382022.357:63292): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382022.357:63292): arch=c000003e syscall=2 success=yes exit=9 a0=325d100 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171382027.404:63293): avc:  denied  { getattr } for  pid=7797 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382027.404:63293): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdb3f83a0 a2=7fffdb3f83a0 a3=6c6280 items=0 ppid=29238 pid=7797 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171382027.404:63293):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171382027.404:63294): avc:  denied  { read } for  pid=7797 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382027.404:63294): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=7797 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171382032.431:63295): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.431:63295): arch=c000003e syscall=86 success=yes exit=0 a0=31dfc00 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171382032.431:63296): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.431:63296): arch=c000003e syscall=87 success=yes exit=0 a0=31dfc00 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171382032.432:63297): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.432:63297): arch=c000003e syscall=2 success=yes exit=10 a0=33cb8f0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171382032.453:63298): avc:  denied  { create } for  pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.453:63298): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171382032.453:63299): avc:  denied  { write } for  pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.453:63299): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171382032.453:63299):  path="/home/dhighley/_w5B.Q8d0FB.douglas"
>type=AVC msg=audit(1171382032.454:63300): avc:  denied  { getattr } for  pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.454:63300): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff906bc0b0 a2=7fff906bc0b0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171382032.454:63300):  path="/home/dhighley/_w5B.Q8d0FB.douglas"
>type=AVC msg=audit(1171382032.454:63301): avc:  denied  { link } for  pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.454:63301): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61efb0 a2=7fff906bbfd0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171382032.454:63302): avc:  denied  { unlink } for  pid=7792 comm="procmail" name="_w5B.Q8d0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171382032.454:63302): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61efb0 a2=7fff906bbfd0 a3=61b650 items=0 ppid=7787 pid=7792 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171382101.544:63303): user pid=7804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171382101.545:63304): login pid=7804 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171382101.549:63305): user pid=7804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171382101.549:63306): user pid=7804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171382401.876:63307): user pid=7840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171382401.876:63308): login pid=7840 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171382401.879:63309): user pid=7841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171382401.879:63310): login pid=7841 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171382401.882:63311): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171382401.882:63312): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171382401.884:63313): user pid=7841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171382401.884:63314): user pid=7841 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171382401.904:63315): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171382401.904:63316): user pid=7840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171382461.214:63317): user pid=7856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171382461.214:63318): login pid=7856 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171382461.218:63319): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171382461.219:63320): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171382462.121:63321): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171382462.121:63322): user pid=7856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171382701.131:63323): user pid=7894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171382701.131:63324): login pid=7894 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171382701.135:63325): user pid=7894 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171382701.135:63326): user pid=7894 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171383001.472:63327): user pid=7939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383001.472:63328): login pid=7939 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171383001.475:63329): user pid=7940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383001.475:63330): login pid=7940 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171383001.475:63331): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383001.476:63332): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171383001.487:63333): user pid=7940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383001.487:63334): user pid=7940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171383001.495:63335): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171383001.495:63336): user pid=7939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171383237.410:63337): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171383237.410:63338): user pid=6547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171383301.415:63339): user pid=7978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383301.415:63340): login pid=7978 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171383301.420:63341): user pid=7978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383301.420:63342): user pid=7978 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171383601.741:63343): user pid=8012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383601.742:63344): login pid=8012 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171383601.743:63345): user pid=8013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383601.743:63346): login pid=8013 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171383601.748:63347): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383601.748:63348): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171383601.753:63349): user pid=8013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383601.753:63350): user pid=8013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171383601.768:63351): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171383601.768:63352): user pid=8012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171383901.082:63353): user pid=8047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171383901.083:63354): login pid=8047 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171383901.087:63355): user pid=8047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171383901.087:63356): user pid=8047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171384201.424:63357): user pid=8087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171384201.424:63358): login pid=8087 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171384201.425:63359): user pid=8088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171384201.425:63360): login pid=8088 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171384201.430:63361): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171384201.430:63362): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171384201.431:63363): user pid=8088 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171384201.431:63364): user pid=8088 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171384201.461:63365): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171384201.461:63366): user pid=8087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171384501.770:63367): user pid=8122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171384501.770:63368): login pid=8122 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171384501.773:63369): user pid=8122 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171384501.773:63370): user pid=8122 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171384801.094:63371): user pid=8155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171384801.094:63372): login pid=8155 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171384801.096:63373): user pid=8156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171384801.096:63374): login pid=8156 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171384801.099:63375): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171384801.099:63376): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171384801.102:63377): user pid=8156 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171384801.102:63378): user pid=8156 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171384801.117:63379): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171384801.117:63380): user pid=8155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171384938.747:63381): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384938.747:63381): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171384938.748:63382): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12487040 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384938.748:63382): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171384944.357:63383): avc:  denied  { search } for  pid=8192 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171384944.357:63383): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171384944.357:63384): avc:  denied  { getattr } for  pid=8192 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.357:63384): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc7757700 a2=7fffc7757700 a3=6c6280 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171384944.357:63384):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171384944.357:63385): avc:  denied  { read } for  pid=8192 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.357:63385): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171384944.367:63386): avc:  denied  { search } for  pid=8192 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171384944.367:63386): avc:  denied  { write } for  pid=8192 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171384944.367:63386): avc:  denied  { add_name } for  pid=8192 comm="pyzor" name="ebI5rd" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171384944.367:63386): avc:  denied  { create } for  pid=8192 comm="pyzor" name="ebI5rd" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.367:63386): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171384944.367:63387): avc:  denied  { getattr } for  pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.367:63387): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc7756000 a2=7fffc7756000 a3=2 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171384944.367:63387):  path="/tmp/ebI5rd"
>type=AVC msg=audit(1171384944.367:63388): avc:  denied  { write } for  pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.367:63388): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171384944.367:63388):  path="/tmp/ebI5rd"
>type=AVC msg=audit(1171384944.368:63389): avc:  denied  { remove_name } for  pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171384944.368:63389): avc:  denied  { unlink } for  pid=8192 comm="pyzor" name="ebI5rd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.368:63389): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171384944.369:63390): avc:  denied  { read } for  pid=8192 comm="pyzor" name="tmpG-4P89" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384944.369:63390): arch=c000003e syscall=0 success=yes exit=516 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=29238 pid=8192 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171384944.369:63390):  path=2F746D702F746D70472D34503839202864656C6574656429
>type=AVC msg=audit(1171384951.486:63391): avc:  denied  { append } for  pid=8187 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384951.486:63391): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8182 pid=8187 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171384951.486:63392): avc:  denied  { lock } for  pid=8187 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171384951.486:63392): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=8182 pid=8187 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171384951.486:63392):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171385101.431:63393): user pid=8206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171385101.431:63394): login pid=8206 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171385101.434:63395): user pid=8206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171385101.434:63396): user pid=8206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171385401.756:63397): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171385401.756:63398): login pid=8241 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171385401.759:63399): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171385401.759:63400): login pid=8242 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171385401.761:63401): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171385401.761:63402): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171385401.763:63403): user pid=8242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171385401.763:63404): user pid=8242 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171385401.790:63405): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171385401.790:63406): user pid=8241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171385701.089:63407): user pid=8279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171385701.089:63408): login pid=8279 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171385701.093:63409): user pid=8279 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171385701.094:63410): user pid=8279 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171386001.429:63411): user pid=8317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386001.429:63412): login pid=8317 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171386001.431:63413): user pid=8318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386001.431:63414): login pid=8318 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171386001.433:63415): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386001.433:63416): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171386001.435:63417): user pid=8319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386001.436:63418): login pid=8319 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171386001.436:63419): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386001.436:63420): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171386001.448:63421): user pid=8319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386001.448:63422): user pid=8319 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171386001.469:63423): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171386001.469:63424): user pid=8317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171386061.779:63425): user pid=8338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386061.779:63426): login pid=8338 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171386061.782:63427): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386061.782:63428): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171386062.686:63429): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171386062.686:63430): user pid=8338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171386127.506:63431): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386127.506:63431): arch=c000003e syscall=2 success=yes exit=13 a0=3477720 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386127.507:63432): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386127.507:63432): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171386127.507:63432):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171386127.525:63433): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386127.525:63433): arch=c000003e syscall=2 success=yes exit=9 a0=346c850 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386128.661:63434): avc:  denied  { getattr } for  pid=8370 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386128.661:63434): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffa1499440 a2=7fffa1499440 a3=6c6280 items=0 ppid=29238 pid=8370 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171386128.661:63434):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171386128.661:63435): avc:  denied  { read } for  pid=8370 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386128.661:63435): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=8370 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171386133.622:63436): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171386133.622:63436): arch=c000003e syscall=62 success=yes exit=0 a0=20b2 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386133.631:63437): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.631:63437): arch=c000003e syscall=86 success=yes exit=0 a0=346f6e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386133.631:63438): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.631:63438): arch=c000003e syscall=87 success=yes exit=0 a0=346f6e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386133.632:63439): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.632:63439): arch=c000003e syscall=2 success=yes exit=9 a0=32d0820 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171386133.643:63440): avc:  denied  { write } for  pid=8366 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171386133.643:63440): avc:  denied  { add_name } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171386133.643:63440): avc:  denied  { create } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.643:63440): arch=c000003e syscall=2 success=yes exit=6 a0=6238f0 a1=c1 a2=124 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171386133.644:63441): avc:  denied  { write } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.644:63441): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171386133.644:63441):  path="/home/dhighley/_uCC.V8e0FB.douglas"
>type=AVC msg=audit(1171386133.644:63442): avc:  denied  { getattr } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.644:63442): arch=c000003e syscall=4 success=yes exit=0 a0=6238f0 a1=7fffeca97490 a2=7fffeca97490 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171386133.644:63442):  path="/home/dhighley/_uCC.V8e0FB.douglas"
>type=AVC msg=audit(1171386133.644:63443): avc:  denied  { link } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.644:63443): arch=c000003e syscall=86 success=yes exit=0 a0=6238f0 a1=61b520 a2=7fffeca973b0 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171386133.644:63444): avc:  denied  { remove_name } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171386133.644:63444): avc:  denied  { unlink } for  pid=8366 comm="procmail" name="_uCC.V8e0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.644:63444): arch=c000003e syscall=87 success=yes exit=0 a0=6238f0 a1=61b520 a2=7fffeca973b0 a3=6238f0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171386133.644:63445): avc:  denied  { append } for  pid=8366 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171386133.644:63445): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8361 pid=8366 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171386301.692:63446): user pid=8386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386301.693:63447): login pid=8386 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171386301.697:63448): user pid=8386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386301.697:63449): user pid=8386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171386601.018:63450): user pid=8426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386601.018:63451): login pid=8426 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171386601.020:63452): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386601.020:63453): login pid=8427 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171386601.021:63454): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386601.021:63455): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171386601.027:63456): user pid=8427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386601.027:63457): user pid=8427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171386601.046:63458): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171386601.047:63459): user pid=8426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171386901.356:63460): user pid=8463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171386901.356:63461): login pid=8463 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171386901.359:63462): user pid=8463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171386901.359:63463): user pid=8463 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171387201.682:63464): user pid=8497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171387201.682:63465): login pid=8497 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171387201.685:63466): user pid=8498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171387201.685:63467): login pid=8498 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171387201.688:63468): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171387201.688:63469): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171387201.690:63470): user pid=8498 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171387201.690:63471): user pid=8498 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171387201.709:63472): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171387201.709:63473): user pid=8497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171387501.018:63474): user pid=8533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171387501.018:63475): login pid=8533 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171387501.022:63476): user pid=8533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171387501.022:63477): user pid=8533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171387801.349:63478): user pid=8570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171387801.349:63479): login pid=8570 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171387801.352:63480): user pid=8571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171387801.352:63481): login pid=8571 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171387801.354:63482): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171387801.354:63483): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171387801.356:63484): user pid=8571 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171387801.356:63485): user pid=8571 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171387801.376:63486): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171387801.376:63487): user pid=8570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171388101.686:63488): user pid=8611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171388101.687:63489): login pid=8611 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171388101.690:63490): user pid=8611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171388101.691:63491): user pid=8611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171388401.015:63492): user pid=8646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171388401.015:63493): login pid=8646 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171388401.017:63494): user pid=8647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171388401.018:63495): login pid=8647 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171388401.019:63496): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171388401.020:63497): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171388401.029:63498): user pid=8647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171388401.029:63499): user pid=8647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171388401.037:63500): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171388401.038:63501): user pid=8646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171388701.351:63502): user pid=8682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171388701.351:63503): login pid=8682 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171388701.355:63504): user pid=8682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171388701.355:63505): user pid=8682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171389001.675:63506): user pid=8720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389001.675:63507): login pid=8720 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171389001.678:63508): user pid=8721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389001.678:63509): login pid=8721 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171389001.681:63510): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389001.681:63511): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171389001.683:63512): user pid=8721 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389001.683:63513): user pid=8721 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171389001.702:63514): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171389001.703:63515): user pid=8720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171389301.005:63516): user pid=8755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389301.005:63517): login pid=8755 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171389301.008:63518): user pid=8755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389301.008:63519): user pid=8755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171389601.335:63520): user pid=8791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389601.335:63521): login pid=8791 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171389601.337:63522): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389601.337:63523): login pid=8790 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171389601.340:63524): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389601.340:63525): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171389601.342:63526): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389601.342:63527): user pid=8791 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171389601.369:63528): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171389601.369:63529): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171389661.662:63530): user pid=8807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389661.662:63531): login pid=8807 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171389661.666:63532): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389661.666:63533): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171389662.574:63534): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171389662.574:63535): user pid=8807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171389901.580:63536): user pid=8843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171389901.581:63537): login pid=8843 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171389901.583:63538): user pid=8843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171389901.583:63539): user pid=8843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171390201.903:63540): user pid=8878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171390201.903:63541): login pid=8878 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171390201.905:63542): user pid=8879 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171390201.905:63544): login pid=8879 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171390201.905:63543): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171390201.905:63545): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171390201.916:63546): user pid=8879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171390201.917:63547): user pid=8879 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171390201.924:63548): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171390201.925:63549): user pid=8878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171390501.256:63550): user pid=8914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171390501.256:63551): login pid=8914 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171390501.259:63552): user pid=8914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171390501.259:63553): user pid=8914 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171390801.587:63554): user pid=8948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171390801.587:63555): login pid=8948 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171390801.589:63556): user pid=8949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171390801.589:63557): login pid=8949 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171390801.590:63558): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171390801.590:63559): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171390801.602:63560): user pid=8949 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171390801.602:63561): user pid=8949 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171390801.608:63562): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171390801.609:63563): user pid=8948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171391101.929:63564): user pid=8985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171391101.929:63565): login pid=8985 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171391101.932:63566): user pid=8985 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171391101.932:63567): user pid=8985 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171391198.864:63568): avc:  denied  { search } for  pid=9012 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171391198.864:63568): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9012 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171391401.251:63569): user pid=9032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171391401.251:63570): login pid=9032 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171391401.253:63571): user pid=9033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171391401.253:63572): login pid=9033 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171391401.257:63573): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171391401.257:63574): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171391401.260:63575): user pid=9033 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171391401.260:63576): user pid=9033 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171391401.287:63577): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171391401.287:63578): user pid=9032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171391596.663:63579): avc:  denied  { create } for  pid=9074 comm="pyzor" name="Ll-YAp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391596.663:63579): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171391596.664:63580): avc:  denied  { getattr } for  pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391596.664:63580): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff414a2940 a2=7fff414a2940 a3=3 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171391596.664:63580):  path="/tmp/Ll-YAp"
>type=AVC msg=audit(1171391596.664:63581): avc:  denied  { write } for  pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391596.664:63581): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171391596.664:63581):  path="/tmp/Ll-YAp"
>type=AVC msg=audit(1171391596.664:63582): avc:  denied  { unlink } for  pid=9074 comm="pyzor" name="Ll-YAp" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391596.664:63582): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171391596.665:63583): avc:  denied  { read } for  pid=9074 comm="pyzor" name="tmpp7m6ll" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391596.665:63583): arch=c000003e syscall=0 success=yes exit=347 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=9074 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171391596.665:63583):  path=2F746D702F746D7070376D366C6C202864656C6574656429
>type=AVC msg=audit(1171391601.656:63584): avc:  denied  { write } for  pid=9069 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171391601.656:63584): avc:  denied  { add_name } for  pid=9069 comm="procmail" name="_tNC.xRg0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171391601.656:63584): arch=c000003e syscall=2 success=yes exit=6 a0=61d1a0 a1=c1 a2=124 a3=61d1a0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171391601.657:63585): avc:  denied  { remove_name } for  pid=9069 comm="procmail" name="_tNC.xRg0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171391601.657:63585): arch=c000003e syscall=87 success=yes exit=0 a0=61d1a0 a1=61b510 a2=7fffb6011930 a3=61d1a0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171391601.657:63586): avc:  denied  { append } for  pid=9069 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171391601.657:63586): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9064 pid=9069 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171391701.591:63587): user pid=9086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171391701.592:63588): login pid=9086 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171391701.595:63589): user pid=9086 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171391701.595:63590): user pid=9086 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171392001.932:63591): user pid=9122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392001.932:63592): login pid=9122 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171392001.935:63593): user pid=9123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392001.935:63594): login pid=9123 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171392001.938:63595): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392001.938:63596): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171392001.940:63597): user pid=9123 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392001.940:63598): user pid=9123 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171392001.963:63599): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171392001.963:63600): user pid=9122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171392301.281:63601): user pid=9158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392301.281:63602): login pid=9158 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171392301.285:63603): user pid=9158 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392301.285:63604): user pid=9158 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171392601.618:63605): user pid=9197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392601.618:63606): login pid=9197 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171392601.619:63607): user pid=9198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392601.620:63608): login pid=9198 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171392601.621:63609): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392601.621:63610): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171392601.626:63611): user pid=9198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392601.626:63612): user pid=9198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171392601.643:63613): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171392601.643:63614): user pid=9197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171392901.964:63615): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171392901.964:63616): login pid=9244 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171392901.967:63617): user pid=9244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171392901.967:63618): user pid=9244 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171393201.296:63619): user pid=9277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393201.297:63620): login pid=9277 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171393201.299:63621): user pid=9278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393201.300:63622): login pid=9278 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171393201.303:63623): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393201.303:63624): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171393201.305:63625): user pid=9278 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393201.305:63626): user pid=9278 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171393201.332:63627): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171393201.332:63628): user pid=9277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171393261.635:63629): user pid=9293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393261.635:63630): login pid=9293 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171393261.639:63631): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393261.639:63632): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171393262.533:63633): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171393262.533:63634): user pid=9293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171393501.541:63635): user pid=9328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393501.542:63636): login pid=9328 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171393501.546:63637): user pid=9328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393501.546:63638): user pid=9328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171393801.877:63639): user pid=9362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393801.877:63640): login pid=9362 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171393801.879:63641): user pid=9363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171393801.880:63642): login pid=9363 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171393801.881:63643): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393801.881:63644): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171393801.886:63645): user pid=9363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171393801.887:63646): user pid=9363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171393801.900:63647): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171393801.900:63648): user pid=9362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171393987.502:63649): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171393987.503:63650): user pid=8318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171394101.507:63651): user pid=9400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171394101.508:63652): login pid=9400 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171394101.511:63653): user pid=9400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171394101.512:63654): user pid=9400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171394401.847:63655): user pid=9433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171394401.847:63656): login pid=9433 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171394401.848:63657): user pid=9434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171394401.849:63658): login pid=9434 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171394401.850:63659): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171394401.850:63660): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171394401.859:63661): user pid=9434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171394401.859:63662): user pid=9434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171394401.868:63663): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171394401.868:63664): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171394701.197:63665): user pid=9469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171394701.197:63666): login pid=9469 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171394701.200:63667): user pid=9469 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171394701.200:63668): user pid=9469 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171395001.527:63669): user pid=9502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395001.528:63670): login pid=9502 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171395001.530:63671): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395001.530:63672): login pid=9503 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171395001.532:63673): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395001.532:63674): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171395001.537:63675): user pid=9503 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395001.537:63676): user pid=9503 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171395001.563:63677): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171395001.563:63678): user pid=9502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171395301.875:63679): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395301.875:63680): login pid=9537 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171395301.879:63681): user pid=9537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395301.879:63682): user pid=9537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171395502.017:63683): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395502.017:63683): arch=c000003e syscall=2 success=yes exit=12 a0=302f530 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171395502.018:63684): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395502.018:63684): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171395502.018:63684):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171395502.023:63685): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395502.023:63685): arch=c000003e syscall=2 success=yes exit=9 a0=3131900 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171395502.877:63686): avc:  denied  { getattr } for  pid=9573 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395502.877:63686): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff750cb140 a2=7fff750cb140 a3=6c6280 items=0 ppid=29238 pid=9573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171395502.877:63686):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171395502.878:63687): avc:  denied  { read } for  pid=9573 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395502.878:63687): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9573 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171395504.002:63688): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.002:63688): arch=c000003e syscall=86 success=yes exit=0 a0=3300040 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171395504.002:63689): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.002:63689): arch=c000003e syscall=87 success=yes exit=0 a0=3300040 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171395504.003:63690): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.003:63690): arch=c000003e syscall=2 success=yes exit=9 a0=30bff20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171395504.013:63691): avc:  denied  { create } for  pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.013:63691): arch=c000003e syscall=2 success=yes exit=6 a0=61cb10 a1=c1 a2=124 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171395504.014:63692): avc:  denied  { write } for  pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.014:63692): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171395504.014:63692):  path="/home/dhighley/_gVC.wOh0FB.douglas"
>type=AVC msg=audit(1171395504.014:63693): avc:  denied  { getattr } for  pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.014:63693): arch=c000003e syscall=4 success=yes exit=0 a0=61cb10 a1=7fff40a74470 a2=7fff40a74470 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171395504.014:63693):  path="/home/dhighley/_gVC.wOh0FB.douglas"
>type=AVC msg=audit(1171395504.014:63694): avc:  denied  { link } for  pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.014:63694): arch=c000003e syscall=86 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff40a74390 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171395504.014:63695): avc:  denied  { unlink } for  pid=9568 comm="procmail" name="_gVC.wOh0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171395504.014:63695): arch=c000003e syscall=87 success=yes exit=0 a0=61cb10 a1=61b510 a2=7fff40a74390 a3=61cb10 items=0 ppid=9563 pid=9568 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171395601.203:63696): user pid=9591 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395601.203:63697): login pid=9591 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171395601.204:63698): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395601.204:63699): login pid=9592 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171395601.209:63700): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395601.209:63701): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171395601.210:63702): user pid=9592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395601.210:63703): user pid=9592 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171395601.238:63704): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171395601.239:63705): user pid=9591 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171395901.540:63706): user pid=9630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171395901.540:63707): login pid=9630 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171395901.544:63708): user pid=9630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171395901.544:63709): user pid=9630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171396072.536:63710): avc:  denied  { search } for  pid=9663 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171396072.536:63710): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171396072.538:63711): avc:  denied  { search } for  pid=9663 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171396072.538:63711): avc:  denied  { write } for  pid=9663 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171396072.538:63711): avc:  denied  { add_name } for  pid=9663 comm="pyzor" name="noRrk4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171396072.538:63711): avc:  denied  { create } for  pid=9663 comm="pyzor" name="noRrk4" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396072.538:63711): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171396072.538:63712): avc:  denied  { getattr } for  pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396072.538:63712): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff6af9edb0 a2=7fff6af9edb0 a3=3 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171396072.538:63712):  path="/tmp/noRrk4"
>type=AVC msg=audit(1171396072.538:63713): avc:  denied  { write } for  pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396072.538:63713): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171396072.538:63713):  path="/tmp/noRrk4"
>type=AVC msg=audit(1171396072.538:63714): avc:  denied  { remove_name } for  pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171396072.538:63714): avc:  denied  { unlink } for  pid=9663 comm="pyzor" name="noRrk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396072.538:63714): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171396072.539:63715): avc:  denied  { read } for  pid=9663 comm="pyzor" name="tmpJ2Q6yG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396072.539:63715): arch=c000003e syscall=0 success=yes exit=1431 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=9663 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171396072.539:63715):  path=2F746D702F746D704A3251367947202864656C6574656429
>type=AVC msg=audit(1171396077.498:63716): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171396077.498:63716): arch=c000003e syscall=62 success=yes exit=0 a0=25bf a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171396077.667:63717): avc:  denied  { append } for  pid=9659 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171396077.667:63717): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9654 pid=9659 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171396201.866:63718): user pid=9676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396201.866:63719): login pid=9676 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171396201.869:63720): user pid=9675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396201.869:63721): login pid=9675 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171396201.870:63722): user pid=9676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396201.870:63723): user pid=9676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171396201.880:63724): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396201.880:63725): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171396201.901:63726): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171396201.901:63727): user pid=9675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171396501.214:63728): user pid=9713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396501.214:63729): login pid=9713 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171396501.218:63730): user pid=9713 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396501.219:63731): user pid=9713 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171396801.538:63732): user pid=9759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396801.538:63733): login pid=9759 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171396801.540:63734): user pid=9760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396801.541:63735): login pid=9760 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171396801.543:63736): user pid=9761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396801.543:63737): login pid=9761 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171396801.544:63738): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396801.544:63739): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171396801.551:63740): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396801.551:63741): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171396801.553:63742): user pid=9761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396801.553:63743): user pid=9761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171396801.571:63744): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171396801.572:63745): user pid=9759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171396861.879:63746): user pid=9783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171396861.879:63747): login pid=9783 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171396861.883:63748): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171396861.883:63749): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171396862.765:63750): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171396862.765:63751): user pid=9783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171397101.772:63752): user pid=9819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171397101.772:63753): login pid=9819 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171397101.776:63754): user pid=9819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171397101.776:63755): user pid=9819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171397401.105:63756): user pid=9855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171397401.106:63757): login pid=9855 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171397401.108:63758): user pid=9856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171397401.108:63759): login pid=9856 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171397401.108:63760): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171397401.108:63761): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171397401.119:63762): user pid=9856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171397401.120:63763): user pid=9856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171397401.126:63764): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171397401.127:63765): user pid=9855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171397450.656:63766): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397450.656:63766): arch=c000003e syscall=2 success=yes exit=12 a0=33b8ba0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397450.656:63767): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397450.656:63767): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171397450.656:63767):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171397450.667:63768): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397450.667:63768): arch=c000003e syscall=2 success=yes exit=9 a0=32fff80 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397454.443:63769): avc:  denied  { getattr } for  pid=9880 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397454.443:63769): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe57496f0 a2=7fffe57496f0 a3=6c6280 items=0 ppid=29238 pid=9880 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171397454.443:63769):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171397454.443:63770): avc:  denied  { read } for  pid=9880 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397454.443:63770): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=9880 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171397459.405:63771): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171397459.405:63771): arch=c000003e syscall=62 success=yes exit=0 a0=2698 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397459.417:63772): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.417:63772): arch=c000003e syscall=86 success=yes exit=0 a0=3106cb0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397459.417:63773): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.417:63773): arch=c000003e syscall=87 success=yes exit=0 a0=3106cb0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397459.418:63774): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.418:63774): arch=c000003e syscall=2 success=yes exit=9 a0=3324b20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171397459.456:63775): avc:  denied  { write } for  pid=9876 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171397459.456:63775): avc:  denied  { add_name } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171397459.456:63775): avc:  denied  { create } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.456:63775): arch=c000003e syscall=2 success=yes exit=6 a0=61e9a0 a1=c1 a2=124 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171397459.457:63776): avc:  denied  { write } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.457:63776): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171397459.457:63776):  path="/home/dhighley/_UaC.Tth0FB.douglas"
>type=AVC msg=audit(1171397459.457:63777): avc:  denied  { getattr } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.457:63777): arch=c000003e syscall=4 success=yes exit=0 a0=61e9a0 a1=7fff28846240 a2=7fff28846240 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171397459.457:63777):  path="/home/dhighley/_UaC.Tth0FB.douglas"
>type=AVC msg=audit(1171397459.457:63778): avc:  denied  { link } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.457:63778): arch=c000003e syscall=86 success=yes exit=0 a0=61e9a0 a1=61b520 a2=7fff28846160 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171397459.457:63779): avc:  denied  { remove_name } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171397459.457:63779): avc:  denied  { unlink } for  pid=9876 comm="procmail" name="_UaC.Tth0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171397459.457:63779): arch=c000003e syscall=87 success=yes exit=0 a0=61e9a0 a1=61b520 a2=7fff28846160 a3=61e9a0 items=0 ppid=9871 pid=9876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171397701.439:63780): user pid=9908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171397701.439:63781): login pid=9908 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171397701.443:63782): user pid=9908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171397701.443:63783): user pid=9908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171398001.779:63784): user pid=9947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398001.779:63785): login pid=9947 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171398001.781:63786): user pid=9948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398001.781:63787): login pid=9948 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171398001.783:63788): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398001.783:63789): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171398001.793:63790): user pid=9948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398001.793:63791): user pid=9948 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171398001.803:63792): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171398001.803:63793): user pid=9947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171398301.126:63794): user pid=9984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398301.126:63795): login pid=9984 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171398301.129:63796): user pid=9984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398301.130:63797): user pid=9984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171398601.449:63798): user pid=10019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398601.450:63799): login pid=10019 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171398601.452:63800): user pid=10020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398601.453:63801): login pid=10020 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171398601.453:63802): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398601.453:63803): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171398601.462:63804): user pid=10020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398601.462:63805): user pid=10020 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171398601.473:63806): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171398601.473:63807): user pid=10019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171398901.789:63808): user pid=10056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171398901.789:63809): login pid=10056 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171398901.793:63810): user pid=10056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171398901.793:63811): user pid=10056 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171399201.113:63812): user pid=10090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171399201.113:63813): login pid=10090 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171399201.115:63814): user pid=10091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171399201.115:63815): login pid=10091 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171399201.116:63816): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171399201.116:63817): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171399201.119:63818): user pid=10091 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171399201.119:63819): user pid=10091 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171399201.137:63820): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171399201.137:63821): user pid=10090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171399501.460:63822): user pid=10128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171399501.460:63823): login pid=10128 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171399501.464:63824): user pid=10128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171399501.464:63825): user pid=10128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171399801.783:63826): user pid=10160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171399801.783:63827): login pid=10160 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171399801.785:63828): user pid=10161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171399801.786:63829): login pid=10161 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171399801.788:63830): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171399801.788:63831): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171399801.799:63832): user pid=10161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171399801.799:63833): user pid=10161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171399801.807:63834): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171399801.807:63835): user pid=10160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171400101.136:63836): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171400101.136:63837): login pid=10195 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171400101.139:63838): user pid=10195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171400101.139:63839): user pid=10195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171400393.238:63840): avc:  denied  { search } for  pid=10239 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171400393.238:63840): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171400393.239:63841): avc:  denied  { create } for  pid=10239 comm="pyzor" name="sbJwG5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171400393.239:63841): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171400393.240:63842): avc:  denied  { getattr } for  pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171400393.240:63842): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5a8a8150 a2=7fff5a8a8150 a3=2 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171400393.240:63842):  path="/tmp/sbJwG5"
>type=AVC msg=audit(1171400393.240:63843): avc:  denied  { write } for  pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171400393.240:63843): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171400393.240:63843):  path="/tmp/sbJwG5"
>type=AVC msg=audit(1171400393.240:63844): avc:  denied  { unlink } for  pid=10239 comm="pyzor" name="sbJwG5" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171400393.240:63844): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171400393.242:63845): avc:  denied  { read } for  pid=10239 comm="pyzor" name="tmpJb2rVd" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171400393.242:63845): arch=c000003e syscall=0 success=yes exit=951 a0=4 a1=2aaaaf34d000 a2=1000 a3=90 items=0 ppid=29238 pid=10239 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171400393.242:63845):  path=2F746D702F746D704A6232725664202864656C6574656429
>type=USER_ACCT msg=audit(1171400401.469:63846): user pid=10240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171400401.470:63847): login pid=10240 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171400401.472:63848): user pid=10241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171400401.472:63849): login pid=10241 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171400401.475:63850): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171400401.475:63851): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171400401.477:63852): user pid=10241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171400401.477:63853): user pid=10241 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171400401.497:63854): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171400401.498:63855): user pid=10240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171400461.811:63856): user pid=10255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171400461.812:63857): login pid=10255 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171400461.815:63858): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171400461.816:63859): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171400462.726:63860): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171400462.726:63861): user pid=10255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171400701.735:63862): user pid=10291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171400701.735:63863): login pid=10291 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171400701.740:63864): user pid=10291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171400701.740:63865): user pid=10291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171401001.075:63866): user pid=10328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401001.076:63867): login pid=10328 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171401001.076:63868): user pid=10327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401001.076:63869): login pid=10327 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171401001.081:63870): user pid=10328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401001.081:63871): user pid=10328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171401001.085:63872): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401001.085:63873): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171401001.109:63874): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171401001.109:63875): user pid=10327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171401301.405:63876): user pid=10364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401301.405:63877): login pid=10364 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171401301.407:63878): user pid=10364 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401301.408:63879): user pid=10364 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171401601.737:63880): user pid=10397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401601.737:63881): login pid=10397 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171401601.738:63882): user pid=10396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401601.738:63883): login pid=10396 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171401601.741:63884): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401601.741:63885): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171401601.743:63886): user pid=10397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401601.743:63887): user pid=10397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171401601.761:63888): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171401601.762:63889): user pid=10396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171401751.981:63890): avc:  denied  { search } for  pid=10429 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171401751.981:63890): avc:  denied  { write } for  pid=10429 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171401751.981:63890): avc:  denied  { add_name } for  pid=10429 comm="pyzor" name="t9rl2j" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171401751.981:63890): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10429 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171401751.982:63891): avc:  denied  { remove_name } for  pid=10429 comm="pyzor" name="t9rl2j" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171401751.982:63891): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10429 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171401901.075:63892): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171401901.075:63893): login pid=10442 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171401901.079:63894): user pid=10442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171401901.079:63895): user pid=10442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171402013.286:63896): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402013.286:63896): arch=c000003e syscall=2 success=yes exit=12 a0=346f440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402013.286:63897): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402013.286:63897): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402013.286:63897):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171402013.294:63898): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402013.294:63898): arch=c000003e syscall=2 success=yes exit=9 a0=346b570 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402013.886:63899): avc:  denied  { getattr } for  pid=10474 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402013.886:63899): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9bc83c30 a2=7fff9bc83c30 a3=6c6280 items=0 ppid=29238 pid=10474 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402013.886:63899):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171402013.886:63900): avc:  denied  { read } for  pid=10474 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402013.886:63900): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10474 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171402018.848:63901): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171402018.848:63901): arch=c000003e syscall=62 success=yes exit=0 a0=28ea a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402018.868:63902): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402018.868:63902): arch=c000003e syscall=86 success=yes exit=0 a0=31ae2d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402018.868:63903): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402018.868:63903): arch=c000003e syscall=87 success=yes exit=0 a0=31ae2d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402018.869:63904): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402018.869:63904): arch=c000003e syscall=2 success=yes exit=9 a0=35b9ba0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171402196.393:63905): avc:  denied  { write } for  pid=10493 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171402196.393:63905): avc:  denied  { add_name } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171402196.393:63905): avc:  denied  { create } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.393:63905): arch=c000003e syscall=2 success=yes exit=6 a0=61d7b0 a1=c1 a2=124 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171402196.393:63906): avc:  denied  { write } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.393:63906): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402196.393:63906):  path="/home/dhighley/_9jC.U3i0FB.douglas"
>type=AVC msg=audit(1171402196.393:63907): avc:  denied  { getattr } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.393:63907): arch=c000003e syscall=4 success=yes exit=0 a0=61d7b0 a1=7fffbf7eb1e0 a2=7fffbf7eb1e0 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402196.393:63907):  path="/home/dhighley/_9jC.U3i0FB.douglas"
>type=AVC msg=audit(1171402196.394:63908): avc:  denied  { link } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.394:63908): arch=c000003e syscall=86 success=yes exit=0 a0=61d7b0 a1=61b520 a2=7fffbf7eb100 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171402196.394:63909): avc:  denied  { remove_name } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171402196.394:63909): avc:  denied  { unlink } for  pid=10493 comm="procmail" name="_9jC.U3i0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.394:63909): arch=c000003e syscall=87 success=yes exit=0 a0=61d7b0 a1=61b520 a2=7fffbf7eb100 a3=61d7b0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171402196.394:63910): avc:  denied  { append } for  pid=10493 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402196.394:63910): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10490 pid=10493 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171402201.406:63911): user pid=10501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171402201.407:63912): login pid=10501 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171402201.407:63913): user pid=10500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171402201.407:63914): login pid=10500 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171402201.412:63915): user pid=10501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171402201.412:63916): user pid=10501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171402201.415:63917): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171402201.415:63918): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171402201.449:63919): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171402201.449:63920): user pid=10500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171402501.737:63921): user pid=10550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171402501.737:63922): login pid=10550 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171402501.741:63923): user pid=10550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171402501.741:63924): user pid=10550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171402702.140:63925): avc:  denied  { search } for  pid=10582 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171402702.140:63925): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171402702.142:63926): avc:  denied  { create } for  pid=10582 comm="pyzor" name="sDAljh" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402702.142:63926): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171402702.142:63927): avc:  denied  { getattr } for  pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402702.142:63927): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd622c040 a2=7fffd622c040 a3=3 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402702.142:63927):  path="/tmp/sDAljh"
>type=AVC msg=audit(1171402702.142:63928): avc:  denied  { write } for  pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402702.142:63928): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402702.142:63928):  path="/tmp/sDAljh"
>type=AVC msg=audit(1171402702.142:63929): avc:  denied  { unlink } for  pid=10582 comm="pyzor" name="sDAljh" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402702.142:63929): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171402702.143:63930): avc:  denied  { read } for  pid=10582 comm="pyzor" name="tmpMTmcsz" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402702.143:63930): arch=c000003e syscall=0 success=yes exit=2572 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8774 items=0 ppid=29238 pid=10582 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171402702.143:63930):  path=2F746D702F746D704D546D63737A202864656C6574656429
>type=AVC msg=audit(1171402707.129:63931): avc:  denied  { append } for  pid=10578 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171402707.129:63931): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10575 pid=10578 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171402801.076:63932): user pid=10593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171402801.076:63933): login pid=10593 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171402801.078:63934): user pid=10594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171402801.078:63935): login pid=10594 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171402801.083:63936): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171402801.083:63937): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171402801.088:63938): user pid=10594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171402801.088:63939): user pid=10594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171402801.106:63940): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171402801.106:63941): user pid=10593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171403101.429:63942): user pid=10632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171403101.429:63943): login pid=10632 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171403101.436:63944): user pid=10632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171403101.436:63945): user pid=10632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171403401.768:63946): user pid=10670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171403401.768:63947): login pid=10670 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171403401.770:63948): user pid=10671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171403401.771:63949): login pid=10671 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171403401.771:63950): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171403401.771:63951): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171403401.778:63952): user pid=10671 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171403401.778:63953): user pid=10671 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171403401.803:63954): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171403401.803:63955): user pid=10670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171403548.705:63956): avc:  denied  { search } for  pid=10705 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171403548.705:63956): avc:  denied  { write } for  pid=10705 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171403548.705:63956): avc:  denied  { add_name } for  pid=10705 comm="pyzor" name="KAeNjg" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171403548.705:63956): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10705 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171403548.706:63957): avc:  denied  { remove_name } for  pid=10705 comm="pyzor" name="KAeNjg" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171403548.706:63957): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10705 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171403553.696:63958): avc:  denied  { write } for  pid=10701 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171403553.696:63958): avc:  denied  { add_name } for  pid=10701 comm="procmail" name="_NnC.hMj0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171403553.696:63958): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=10696 pid=10701 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171403553.697:63959): avc:  denied  { remove_name } for  pid=10701 comm="procmail" name="_NnC.hMj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171403553.697:63959): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=6207c0 a2=7fffbad4c660 a3=61b650 items=0 ppid=10696 pid=10701 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171403701.106:63960): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171403701.107:63961): login pid=10718 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171403701.110:63962): user pid=10718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171403701.110:63963): user pid=10718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171404001.438:63964): user pid=10756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404001.439:63965): login pid=10756 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171404001.439:63966): user pid=10755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404001.439:63967): login pid=10755 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171404001.444:63968): user pid=10756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404001.444:63969): user pid=10756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171404001.450:63970): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404001.450:63971): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171404001.471:63972): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171404001.471:63973): user pid=10755 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171404021.646:63974): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404021.646:63974): arch=c000003e syscall=2 success=yes exit=12 a0=32da620 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171404021.647:63975): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404021.647:63975): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171404021.647:63975):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171404021.652:63976): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404021.652:63976): arch=c000003e syscall=2 success=yes exit=9 a0=329bdd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171404022.910:63977): avc:  denied  { getattr } for  pid=10779 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404022.910:63977): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff182634e0 a2=7fff182634e0 a3=6c6280 items=0 ppid=29238 pid=10779 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171404022.910:63977):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171404022.910:63978): avc:  denied  { read } for  pid=10779 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404022.910:63978): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10779 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171404023.762:63979): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.762:63979): arch=c000003e syscall=86 success=yes exit=0 a0=333bf30 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171404023.762:63980): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.762:63980): arch=c000003e syscall=87 success=yes exit=0 a0=333bf30 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171404023.763:63981): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.763:63981): arch=c000003e syscall=2 success=yes exit=9 a0=35ecd50 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171404023.883:63982): avc:  denied  { create } for  pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.883:63982): arch=c000003e syscall=2 success=yes exit=6 a0=61c770 a1=c1 a2=124 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171404023.883:63983): avc:  denied  { write } for  pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.883:63983): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171404023.883:63983):  path="/home/dhighley/_XoC.3Tj0FB.douglas"
>type=AVC msg=audit(1171404023.884:63984): avc:  denied  { getattr } for  pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.884:63984): arch=c000003e syscall=4 success=yes exit=0 a0=61c770 a1=7fff65e81880 a2=7fff65e81880 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171404023.884:63984):  path="/home/dhighley/_XoC.3Tj0FB.douglas"
>type=AVC msg=audit(1171404023.884:63985): avc:  denied  { link } for  pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.884:63985): arch=c000003e syscall=86 success=yes exit=0 a0=61c770 a1=61b520 a2=7fff65e817a0 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171404023.884:63986): avc:  denied  { unlink } for  pid=10775 comm="procmail" name="_XoC.3Tj0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171404023.884:63986): arch=c000003e syscall=87 success=yes exit=0 a0=61c770 a1=61b520 a2=7fff65e817a0 a3=61c770 items=0 ppid=10770 pid=10775 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171404061.763:63987): user pid=10799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404061.764:63988): login pid=10799 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171404061.766:63989): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404061.766:63990): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171404062.648:63991): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171404062.649:63992): user pid=10799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171404301.654:63993): user pid=10834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404301.654:63994): login pid=10834 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171404301.657:63995): user pid=10834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404301.657:63996): user pid=10834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171404601.978:63997): user pid=10872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404601.978:63998): login pid=10872 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171404601.981:63999): user pid=10873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404601.981:64000): login pid=10873 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171404601.984:64001): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404601.984:64002): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171404601.986:64003): user pid=10873 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404601.986:64004): user pid=10873 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171404602.014:64005): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171404602.015:64006): user pid=10872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171404681.101:64007): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171404681.101:64007): arch=c000003e syscall=62 success=yes exit=0 a0=2a96 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171404787.654:64008): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171404787.654:64009): user pid=9760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171404901.660:64010): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171404901.660:64011): login pid=10922 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171404901.664:64012): user pid=10922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171404901.664:64013): user pid=10922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171405029.413:64014): avc:  denied  { search } for  pid=10954 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171405029.413:64014): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171405029.414:64015): avc:  denied  { create } for  pid=10954 comm="pyzor" name="q2kHij" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405029.414:64015): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171405029.414:64016): avc:  denied  { getattr } for  pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405029.414:64016): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc4091bb0 a2=7fffc4091bb0 a3=3 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171405029.414:64016):  path="/tmp/q2kHij"
>type=AVC msg=audit(1171405029.414:64017): avc:  denied  { write } for  pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405029.414:64017): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171405029.414:64017):  path="/tmp/q2kHij"
>type=AVC msg=audit(1171405029.415:64018): avc:  denied  { unlink } for  pid=10954 comm="pyzor" name="q2kHij" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405029.415:64018): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171405029.415:64019): avc:  denied  { read } for  pid=10954 comm="pyzor" name="tmpXKzcOc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405029.415:64019): arch=c000003e syscall=0 success=yes exit=2020 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=10954 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171405029.415:64019):  path=2F746D702F746D70584B7A634F63202864656C6574656429
>type=AVC msg=audit(1171405034.411:64020): avc:  denied  { append } for  pid=10950 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171405034.411:64020): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=10945 pid=10950 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171405201.990:64021): user pid=10968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171405201.991:64022): login pid=10968 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171405201.993:64023): user pid=10969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171405201.993:64024): login pid=10969 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171405201.996:64025): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171405201.996:64026): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171405201.998:64027): user pid=10969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171405201.998:64028): user pid=10969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171405202.021:64029): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171405202.021:64030): user pid=10968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171405501.328:64031): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171405501.328:64032): login pid=11012 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171405501.331:64033): user pid=11012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171405501.331:64034): user pid=11012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171405801.655:64035): user pid=11046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171405801.656:64036): login pid=11046 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171405801.658:64037): user pid=11047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171405801.658:64038): login pid=11047 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171405801.660:64039): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171405801.660:64040): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171405801.669:64041): user pid=11047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171405801.669:64042): user pid=11047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171405801.679:64043): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171405801.680:64044): user pid=11046 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171406101.003:64045): user pid=11082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171406101.003:64046): login pid=11082 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171406101.007:64047): user pid=11082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171406101.007:64048): user pid=11082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171406401.325:64049): user pid=11116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171406401.325:64050): login pid=11116 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171406401.327:64051): user pid=11117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171406401.328:64052): login pid=11117 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171406401.329:64053): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171406401.329:64054): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171406401.333:64055): user pid=11117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171406401.333:64056): user pid=11117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171406401.352:64057): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171406401.352:64058): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171406701.658:64059): user pid=11152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171406701.658:64060): login pid=11152 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171406701.662:64061): user pid=11152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171406701.662:64062): user pid=11152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171407001.995:64063): user pid=11186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407001.995:64064): login pid=11186 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171407001.995:64065): user pid=11187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407001.996:64066): login pid=11187 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171407002.000:64067): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407002.000:64068): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171407002.003:64069): user pid=11187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407002.003:64070): user pid=11187 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171407002.023:64071): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171407002.023:64072): user pid=11186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171407301.337:64073): user pid=11223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407301.337:64074): login pid=11223 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171407301.341:64075): user pid=11223 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407301.341:64076): user pid=11223 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171407601.665:64077): user pid=11256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407601.665:64078): login pid=11256 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171407601.665:64079): user pid=11257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407601.665:64080): login pid=11257 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171407601.668:64081): user pid=11258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407601.668:64082): login pid=11258 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171407601.670:64083): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407601.670:64084): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171407601.673:64085): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407601.673:64086): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171407601.680:64087): user pid=11258 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407601.680:64088): user pid=11258 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171407601.705:64089): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171407601.705:64090): user pid=11256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171407661.997:64091): user pid=11278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407661.997:64092): login pid=11278 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171407662.001:64093): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407662.001:64094): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171407662.884:64095): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171407662.884:64096): user pid=11278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171407901.893:64097): user pid=11313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171407901.894:64098): login pid=11313 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171407901.897:64099): user pid=11313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171407901.897:64100): user pid=11313 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171407941.495:64101): avc:  denied  { getattr } for  pid=11337 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407941.495:64101): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffffb5c3570 a2=7ffffb5c3570 a3=6c6280 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171407941.495:64101):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171407941.495:64102): avc:  denied  { read } for  pid=11337 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407941.495:64102): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171407941.496:64103): avc:  denied  { search } for  pid=11337 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171407941.496:64103): avc:  denied  { write } for  pid=11337 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171407941.496:64103): avc:  denied  { add_name } for  pid=11337 comm="pyzor" name="H9yOMu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171407941.496:64103): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171407941.497:64104): avc:  denied  { remove_name } for  pid=11337 comm="pyzor" name="H9yOMu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171407941.497:64104): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=11337 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171407942.982:64105): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407942.982:64105): arch=c000003e syscall=2 success=yes exit=9 a0=34a6300 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171407942.999:64106): avc:  denied  { write } for  pid=11333 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171407942.999:64106): avc:  denied  { add_name } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171407942.999:64106): avc:  denied  { create } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407942.999:64106): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171407942.999:64107): avc:  denied  { write } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407942.999:64107): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171407942.999:64107):  path="/home/dhighley/_FxC.GRk0FB.douglas"
>type=AVC msg=audit(1171407942.999:64108): avc:  denied  { getattr } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407942.999:64108): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fffb283b230 a2=7fffb283b230 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171407942.999:64108):  path="/home/dhighley/_FxC.GRk0FB.douglas"
>type=AVC msg=audit(1171407942.999:64109): avc:  denied  { link } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407942.999:64109): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fffb283b150 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171407943.000:64110): avc:  denied  { remove_name } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171407943.000:64110): avc:  denied  { unlink } for  pid=11333 comm="procmail" name="_FxC.GRk0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407943.000:64110): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fffb283b150 a3=61b5c0 items=0 ppid=11328 pid=11333 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171407964.599:64111): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407964.599:64111): arch=c000003e syscall=2 success=yes exit=12 a0=33e3100 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171407964.599:64112): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407964.599:64112): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171407964.599:64112):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171407964.607:64113): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407964.607:64113): arch=c000003e syscall=2 success=yes exit=9 a0=330f0e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171407970.050:64114): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171407970.050:64114): arch=c000003e syscall=62 success=yes exit=0 a0=2c55 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171407970.642:64115): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407970.642:64115): arch=c000003e syscall=86 success=yes exit=0 a0=375c890 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171407970.642:64116): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171407970.642:64116): arch=c000003e syscall=87 success=yes exit=0 a0=375c890 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171408201.223:64117): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171408201.223:64118): login pid=11369 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171408201.225:64119): user pid=11368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171408201.225:64120): login pid=11368 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171408201.230:64121): user pid=11369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171408201.230:64122): user pid=11369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171408201.234:64123): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171408201.234:64124): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171408201.256:64125): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171408201.256:64126): user pid=11368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171408501.552:64127): user pid=11407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171408501.552:64128): login pid=11407 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171408501.556:64129): user pid=11407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171408501.556:64130): user pid=11407 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171408801.882:64131): user pid=11441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171408801.882:64132): login pid=11441 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171408801.885:64133): user pid=11442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171408801.885:64134): login pid=11442 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171408801.885:64135): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171408801.885:64136): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171408801.892:64137): user pid=11442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171408801.892:64138): user pid=11442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171408801.906:64139): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171408801.906:64140): user pid=11441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171409101.221:64141): user pid=11480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171409101.221:64142): login pid=11480 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171409101.225:64143): user pid=11480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171409101.225:64144): user pid=11480 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171409401.550:64145): user pid=11524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171409401.550:64146): user pid=11525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171409401.550:64147): login pid=11524 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171409401.550:64148): login pid=11525 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171409401.555:64149): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171409401.555:64150): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171409401.556:64151): user pid=11525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171409401.556:64152): user pid=11525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171409401.577:64153): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171409401.577:64154): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171409701.883:64155): user pid=11562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171409701.883:64156): login pid=11562 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171409701.886:64157): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171409701.886:64158): user pid=11562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171410001.223:64159): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410001.224:64160): login pid=11595 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171410001.226:64161): user pid=11596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171410001.226:64162): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410001.226:64163): login pid=11596 uid=0 old auid=4294967295 new auid=111
>type=CRED_ACQ msg=audit(1171410001.227:64164): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171410001.239:64165): user pid=11596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171410001.240:64166): user pid=11596 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171410001.245:64167): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171410001.246:64168): user pid=11595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171410301.573:64169): user pid=11632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410301.574:64170): login pid=11632 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171410301.578:64171): user pid=11632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171410301.578:64172): user pid=11632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171410601.907:64173): user pid=11665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410601.907:64174): login pid=11665 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171410601.909:64175): user pid=11666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410601.910:64176): login pid=11666 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171410601.913:64177): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171410601.913:64178): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171410601.916:64179): user pid=11666 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171410601.916:64180): user pid=11666 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171410601.933:64181): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171410601.933:64182): user pid=11665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171410901.247:64183): user pid=11701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171410901.247:64184): login pid=11701 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171410901.251:64185): user pid=11701 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171410901.251:64186): user pid=11701 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171411201.573:64187): user pid=11740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411201.573:64188): login pid=11740 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171411201.573:64189): user pid=11741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411201.574:64190): login pid=11741 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171411201.578:64191): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411201.578:64192): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171411201.579:64193): user pid=11741 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411201.584:64194): user pid=11741 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171411201.597:64195): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171411201.597:64196): user pid=11740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171411261.906:64197): user pid=11758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411261.906:64198): login pid=11758 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171411261.909:64199): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411261.909:64200): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171411262.791:64201): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171411262.791:64202): user pid=11758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171411501.797:64203): user pid=11794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411501.797:64204): login pid=11794 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171411501.800:64205): user pid=11794 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411501.800:64206): user pid=11794 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171411801.122:64207): user pid=11855 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411801.122:64208): login pid=11855 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171411801.127:64209): user pid=11856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171411801.127:64210): login pid=11856 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171411801.129:64211): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411801.129:64212): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171411801.131:64213): user pid=11856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171411801.131:64214): user pid=11856 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171411801.403:64215): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171411801.404:64216): user pid=11855 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171412101.664:64217): user pid=11896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171412101.665:64218): login pid=11896 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171412101.669:64219): user pid=11896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171412101.669:64220): user pid=11896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171412401.990:64221): user pid=11928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171412401.990:64222): login pid=11928 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171412401.992:64223): user pid=11929 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171412401.992:64224): login pid=11929 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171412401.994:64225): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171412401.994:64226): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171412401.999:64227): user pid=11929 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171412401.999:64228): user pid=11929 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171412402.011:64229): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171412402.012:64230): user pid=11928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171412701.321:64231): user pid=11964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171412701.321:64232): login pid=11964 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171412701.324:64233): user pid=11964 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171412701.324:64234): user pid=11964 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171412714.280:64235): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.280:64235): arch=c000003e syscall=2 success=yes exit=12 a0=32f5520 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412714.281:64236): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.281:64236): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412714.281:64236):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171412714.288:64237): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.288:64237): arch=c000003e syscall=2 success=yes exit=9 a0=3498d50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412714.876:64238): avc:  denied  { search } for  pid=11985 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171412714.876:64238): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171412714.876:64239): avc:  denied  { getattr } for  pid=11985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.876:64239): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9b1b4bb0 a2=7fff9b1b4bb0 a3=6c6280 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412714.876:64239):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171412714.876:64240): avc:  denied  { read } for  pid=11985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.876:64240): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171412714.877:64241): avc:  denied  { search } for  pid=11985 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171412714.877:64241): avc:  denied  { write } for  pid=11985 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171412714.877:64241): avc:  denied  { add_name } for  pid=11985 comm="pyzor" name="2P8BX4" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171412714.877:64241): avc:  denied  { create } for  pid=11985 comm="pyzor" name="2P8BX4" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.877:64241): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171412714.878:64242): avc:  denied  { getattr } for  pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.878:64242): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9b1b30a0 a2=7fff9b1b30a0 a3=3 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412714.878:64242):  path="/tmp/2P8BX4"
>type=AVC msg=audit(1171412714.878:64243): avc:  denied  { write } for  pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.878:64243): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412714.878:64243):  path="/tmp/2P8BX4"
>type=AVC msg=audit(1171412714.878:64244): avc:  denied  { remove_name } for  pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171412714.878:64244): avc:  denied  { unlink } for  pid=11985 comm="pyzor" name="2P8BX4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.878:64244): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171412714.880:64245): avc:  denied  { read } for  pid=11985 comm="pyzor" name="tmpq4a0QS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412714.880:64245): arch=c000003e syscall=0 success=yes exit=1092 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=11985 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412714.880:64245):  path=2F746D702F746D70713461305153202864656C6574656429
>type=AVC msg=audit(1171412719.837:64246): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171412719.837:64246): arch=c000003e syscall=62 success=yes exit=0 a0=2ed1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412719.905:64247): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.905:64247): arch=c000003e syscall=86 success=yes exit=0 a0=32c7530 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412719.905:64248): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.905:64248): arch=c000003e syscall=87 success=yes exit=0 a0=32c7530 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412719.906:64249): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.906:64249): arch=c000003e syscall=2 success=yes exit=9 a0=31301b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171412719.963:64250): avc:  denied  { write } for  pid=11981 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171412719.963:64250): avc:  denied  { add_name } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171412719.963:64250): avc:  denied  { create } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.963:64250): arch=c000003e syscall=2 success=yes exit=6 a0=61cab0 a1=c1 a2=124 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171412719.964:64251): avc:  denied  { write } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.964:64251): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412719.964:64251):  path="/home/dhighley/_N7C.vbl0FB.douglas"
>type=AVC msg=audit(1171412719.964:64252): avc:  denied  { getattr } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.964:64252): arch=c000003e syscall=4 success=yes exit=0 a0=61cab0 a1=7fff6e79d1a0 a2=7fff6e79d1a0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171412719.964:64252):  path="/home/dhighley/_N7C.vbl0FB.douglas"
>type=AVC msg=audit(1171412719.964:64253): avc:  denied  { link } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.964:64253): arch=c000003e syscall=86 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff6e79d0c0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171412719.964:64254): avc:  denied  { remove_name } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171412719.964:64254): avc:  denied  { unlink } for  pid=11981 comm="procmail" name="_N7C.vbl0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.964:64254): arch=c000003e syscall=87 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff6e79d0c0 a3=61cab0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171412719.964:64255): avc:  denied  { append } for  pid=11981 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171412719.964:64255): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=11976 pid=11981 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171413001.653:64256): user pid=12009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413001.653:64257): login pid=12009 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171413001.655:64258): user pid=12010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413001.656:64259): login pid=12010 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171413001.657:64260): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413001.658:64261): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171413001.662:64262): user pid=12010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413001.662:64263): user pid=12010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171413001.683:64264): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171413001.683:64265): user pid=12009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171413301.988:64266): user pid=12048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413301.988:64267): login pid=12048 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171413301.992:64268): user pid=12048 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413301.992:64269): user pid=12048 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171413420.426:64270): avc:  denied  { search } for  pid=12083 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171413420.426:64270): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12083 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171413601.331:64271): user pid=12100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413601.331:64272): login pid=12100 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171413601.333:64273): user pid=12101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413601.333:64274): login pid=12101 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171413601.334:64275): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413601.334:64276): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171413601.348:64277): user pid=12101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413601.348:64278): user pid=12101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171413601.354:64279): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171413601.354:64280): user pid=12100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171413901.680:64281): user pid=12139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171413901.680:64282): login pid=12139 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171413901.683:64283): user pid=12139 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171413901.683:64284): user pid=12139 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171414201.002:64285): user pid=12173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414201.003:64286): login pid=12173 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171414201.005:64287): user pid=12174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414201.005:64288): login pid=12174 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171414201.008:64289): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414201.008:64290): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171414201.010:64291): user pid=12174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414201.010:64292): user pid=12174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171414201.038:64293): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171414201.039:64294): user pid=12173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171414501.350:64295): user pid=12209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414501.350:64296): login pid=12209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171414501.354:64297): user pid=12209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414501.354:64298): user pid=12209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171414591.440:64299): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414591.440:64299): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171414591.440:64300): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414591.440:64300): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171414592.609:64301): avc:  denied  { search } for  pid=12235 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171414592.609:64301): avc:  denied  { write } for  pid=12235 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171414592.609:64301): avc:  denied  { add_name } for  pid=12235 comm="pyzor" name="dsalnW" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171414592.609:64301): avc:  denied  { create } for  pid=12235 comm="pyzor" name="dsalnW" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414592.609:64301): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171414592.609:64302): avc:  denied  { getattr } for  pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414592.609:64302): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe5746be0 a2=7fffe5746be0 a3=3 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171414592.609:64302):  path="/tmp/dsalnW"
>type=AVC msg=audit(1171414592.610:64303): avc:  denied  { write } for  pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414592.610:64303): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171414592.610:64303):  path="/tmp/dsalnW"
>type=AVC msg=audit(1171414592.610:64304): avc:  denied  { remove_name } for  pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171414592.610:64304): avc:  denied  { unlink } for  pid=12235 comm="pyzor" name="dsalnW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414592.610:64304): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171414592.611:64305): avc:  denied  { read } for  pid=12235 comm="pyzor" name="tmpvvWtk4" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414592.611:64305): arch=c000003e syscall=0 success=yes exit=527 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=12235 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171414592.611:64305):  path=2F746D702F746D70767657746B34202864656C6574656429
>type=AVC msg=audit(1171414597.827:64306): avc:  denied  { write } for  pid=12231 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171414597.827:64306): avc:  denied  { add_name } for  pid=12231 comm="procmail" name="_H_C.F5l0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171414597.827:64306): arch=c000003e syscall=2 success=yes exit=6 a0=61c820 a1=c1 a2=124 a3=61c820 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171414597.827:64307): avc:  denied  { remove_name } for  pid=12231 comm="procmail" name="_H_C.F5l0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171414597.827:64307): arch=c000003e syscall=87 success=yes exit=0 a0=61c820 a1=61b520 a2=7fff6290f220 a3=61c820 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171414597.827:64308): avc:  denied  { append } for  pid=12231 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171414597.827:64308): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12226 pid=12231 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171414801.675:64309): user pid=12258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414801.676:64310): login pid=12258 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171414801.678:64311): user pid=12259 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414801.678:64312): login pid=12259 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171414801.682:64313): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414801.682:64314): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171414801.685:64315): user pid=12259 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414801.685:64316): user pid=12259 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171414801.705:64317): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171414801.705:64318): user pid=12258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171414861.021:64319): user pid=12274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171414861.021:64320): login pid=12274 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171414861.024:64321): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171414861.024:64322): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171414861.942:64323): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171414861.942:64324): user pid=12274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171415101.949:64325): user pid=12314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171415101.949:64326): login pid=12314 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171415101.953:64327): user pid=12314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171415101.953:64328): user pid=12314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171415401.288:64329): user pid=12351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171415401.289:64330): login pid=12351 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171415401.290:64331): user pid=12352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171415401.290:64332): login pid=12352 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171415401.295:64333): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171415401.295:64334): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171415401.299:64335): user pid=12352 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171415401.299:64336): user pid=12352 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171415401.315:64337): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171415401.316:64338): user pid=12351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171415512.751:64339): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415512.751:64339): arch=c000003e syscall=2 success=yes exit=12 a0=32de7c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415512.752:64340): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415512.752:64340): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171415512.752:64340):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171415512.759:64341): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415512.759:64341): arch=c000003e syscall=2 success=yes exit=9 a0=33e1b70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415513.525:64342): avc:  denied  { getattr } for  pid=12381 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415513.525:64342): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff164c9470 a2=7fff164c9470 a3=6c6280 items=0 ppid=29238 pid=12381 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171415513.525:64342):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171415513.526:64343): avc:  denied  { read } for  pid=12381 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415513.526:64343): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12381 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171415518.486:64344): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171415518.486:64344): arch=c000003e syscall=62 success=yes exit=0 a0=305d a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415518.679:64345): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.679:64345): arch=c000003e syscall=86 success=yes exit=0 a0=36eb6d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415518.680:64346): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.680:64346): arch=c000003e syscall=87 success=yes exit=0 a0=36eb6d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415518.680:64347): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.680:64347): arch=c000003e syscall=2 success=yes exit=9 a0=60b700 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171415518.742:64348): avc:  denied  { create } for  pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.742:64348): arch=c000003e syscall=2 success=yes exit=6 a0=61cb20 a1=c1 a2=124 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171415518.742:64349): avc:  denied  { write } for  pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.742:64349): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171415518.742:64349):  path="/home/dhighley/_ZBD.eHm0FB.douglas"
>type=AVC msg=audit(1171415518.742:64350): avc:  denied  { getattr } for  pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.742:64350): arch=c000003e syscall=4 success=yes exit=0 a0=61cb20 a1=7fff82b83580 a2=7fff82b83580 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171415518.742:64350):  path="/home/dhighley/_ZBD.eHm0FB.douglas"
>type=AVC msg=audit(1171415518.742:64351): avc:  denied  { link } for  pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.742:64351): arch=c000003e syscall=86 success=yes exit=0 a0=61cb20 a1=61b520 a2=7fff82b834a0 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171415518.742:64352): avc:  denied  { unlink } for  pid=12377 comm="procmail" name="_ZBD.eHm0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171415518.742:64352): arch=c000003e syscall=87 success=yes exit=0 a0=61cb20 a1=61b520 a2=7fff82b834a0 a3=61cb20 items=0 ppid=12372 pid=12377 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171415587.803:64353): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171415587.803:64354): user pid=11257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171415701.810:64355): user pid=12400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171415701.810:64356): login pid=12400 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171415701.814:64357): user pid=12400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171415701.814:64358): user pid=12400 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171416001.144:64359): user pid=12437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416001.144:64360): login pid=12437 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171416001.146:64361): user pid=12438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416001.146:64362): login pid=12438 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171416001.148:64363): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416001.148:64364): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171416001.151:64365): user pid=12438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416001.152:64366): user pid=12438 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171416001.167:64367): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171416001.168:64368): user pid=12437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171416111.702:64369): avc:  denied  { search } for  pid=12478 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171416111.702:64369): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171416111.702:64370): avc:  denied  { getattr } for  pid=12478 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171416111.702:64370): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4250f4b0 a2=7fff4250f4b0 a3=6c6280 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171416111.702:64370):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171416111.702:64371): avc:  denied  { read } for  pid=12478 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171416111.702:64371): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12478 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171416116.787:64372): avc:  denied  { append } for  pid=12474 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171416116.787:64372): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12469 pid=12474 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171416116.787:64373): avc:  denied  { lock } for  pid=12474 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171416116.787:64373): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=12469 pid=12474 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171416116.787:64373):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171416301.491:64374): user pid=12497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416301.491:64375): login pid=12497 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171416301.496:64376): user pid=12497 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416301.496:64377): user pid=12497 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171416601.821:64378): user pid=12535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416601.821:64379): login pid=12535 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171416601.823:64380): user pid=12536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416601.823:64381): login pid=12536 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171416601.827:64382): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416601.827:64383): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171416601.829:64384): user pid=12536 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416601.829:64385): user pid=12536 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171416601.856:64386): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171416601.856:64387): user pid=12535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171416901.167:64388): user pid=12570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171416901.167:64389): login pid=12570 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171416901.170:64390): user pid=12570 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171416901.170:64391): user pid=12570 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171417013.625:64392): avc:  denied  { search } for  pid=12599 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171417013.625:64392): avc:  denied  { write } for  pid=12599 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171417013.625:64392): avc:  denied  { add_name } for  pid=12599 comm="pyzor" name="E7hRgl" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171417013.625:64392): avc:  denied  { create } for  pid=12599 comm="pyzor" name="E7hRgl" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417013.625:64392): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171417013.626:64393): avc:  denied  { getattr } for  pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417013.626:64393): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff551605f0 a2=7fff551605f0 a3=3 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171417013.626:64393):  path="/tmp/E7hRgl"
>type=AVC msg=audit(1171417013.626:64394): avc:  denied  { write } for  pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417013.626:64394): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171417013.626:64394):  path="/tmp/E7hRgl"
>type=AVC msg=audit(1171417013.626:64395): avc:  denied  { remove_name } for  pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171417013.626:64395): avc:  denied  { unlink } for  pid=12599 comm="pyzor" name="E7hRgl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417013.626:64395): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171417013.628:64396): avc:  denied  { read } for  pid=12599 comm="pyzor" name="tmpgLy6fP" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417013.628:64396): arch=c000003e syscall=0 success=yes exit=1090 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=12599 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171417013.628:64396):  path=2F746D702F746D70674C79366650202864656C6574656429
>type=AVC msg=audit(1171417018.909:64397): avc:  denied  { write } for  pid=12595 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171417018.909:64397): avc:  denied  { add_name } for  pid=12595 comm="procmail" name="_zED.6em0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171417018.909:64397): arch=c000003e syscall=2 success=yes exit=6 a0=61cac0 a1=c1 a2=124 a3=61cac0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171417018.910:64398): avc:  denied  { remove_name } for  pid=12595 comm="procmail" name="_zED.6em0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171417018.910:64398): arch=c000003e syscall=87 success=yes exit=0 a0=61cac0 a1=61b520 a2=7fff57eb87d0 a3=61cac0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171417018.910:64399): avc:  denied  { append } for  pid=12595 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171417018.910:64399): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12590 pid=12595 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171417201.495:64400): user pid=12615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171417201.496:64401): login pid=12615 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171417201.498:64402): user pid=12616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171417201.499:64403): login pid=12616 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171417201.501:64404): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171417201.501:64405): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171417201.510:64406): user pid=12616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171417201.511:64407): user pid=12616 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171417201.524:64408): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171417201.525:64409): user pid=12615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171417501.830:64410): user pid=12655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171417501.830:64411): login pid=12655 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171417501.833:64412): user pid=12655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171417501.833:64413): user pid=12655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171417801.164:64414): user pid=12689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171417801.165:64415): login pid=12689 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171417801.166:64416): user pid=12690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171417801.167:64417): login pid=12690 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171417801.169:64418): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171417801.169:64419): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171417801.170:64420): user pid=12690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171417801.173:64421): user pid=12690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171417801.188:64422): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171417801.188:64423): user pid=12689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171418101.495:64424): user pid=12727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418101.495:64425): login pid=12727 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171418101.500:64426): user pid=12727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418101.500:64427): user pid=12727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171418401.820:64428): user pid=12761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418401.820:64429): login pid=12761 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171418401.822:64430): user pid=12762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418401.822:64431): login pid=12762 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171418401.824:64432): user pid=12763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171418401.825:64433): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418401.825:64434): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418401.825:64435): login pid=12763 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171418401.836:64436): user pid=12763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418401.836:64437): user pid=12763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171418401.840:64438): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418401.840:64439): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171418401.850:64440): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171418401.850:64441): user pid=12761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171418461.158:64442): user pid=12782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418461.159:64443): login pid=12782 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171418461.162:64444): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418461.162:64445): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171418462.040:64446): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171418462.041:64447): user pid=12782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171418701.047:64448): user pid=12819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171418701.048:64449): login pid=12819 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171418701.050:64450): user pid=12819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171418701.050:64451): user pid=12819 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171418793.106:64452): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.106:64452): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171418793.106:64452):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171418793.106:64453): avc:  denied  { link } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.106:64453): arch=c000003e syscall=86 success=yes exit=0 a0=31656a0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418793.106:64454): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.106:64454): arch=c000003e syscall=87 success=yes exit=0 a0=31656a0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418793.108:64455): avc:  denied  { write } for  pid=29238 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.108:64455): arch=c000003e syscall=2 success=yes exit=9 a0=31fadb0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418793.109:64456): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.109:64456): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418793.109:64457): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418793.109:64457): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418799.689:64458): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418799.689:64458): arch=c000003e syscall=1 success=yes exit=1152 a0=a a1=33ceb80 a2=480 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171418799.689:64458):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171418799.698:64459): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418799.698:64459): arch=c000003e syscall=2 success=yes exit=9 a0=323c940 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418800.270:64460): avc:  denied  { getattr } for  pid=12847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418800.270:64460): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd67aece0 a2=7fffd67aece0 a3=6c6280 items=0 ppid=29238 pid=12847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171418800.270:64460):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171418800.270:64461): avc:  denied  { read } for  pid=12847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418800.270:64461): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=12847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171418805.232:64462): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171418805.232:64462): arch=c000003e syscall=62 success=yes exit=0 a0=322f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171418805.824:64463): avc:  denied  { create } for  pid=12843 comm="procmail" name="_rID.16m0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418805.824:64463): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171418805.824:64464): avc:  denied  { write } for  pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418805.824:64464): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171418805.824:64464):  path="/home/dhighley/_rID.16m0FB.douglas"
>type=AVC msg=audit(1171418805.824:64465): avc:  denied  { getattr } for  pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418805.824:64465): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff98827220 a2=7fff98827220 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171418805.824:64465):  path="/home/dhighley/_rID.16m0FB.douglas"
>type=AVC msg=audit(1171418805.824:64466): avc:  denied  { link } for  pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418805.824:64466): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fff98827140 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171418805.824:64467): avc:  denied  { unlink } for  pid=12843 comm="procmail" name="_rID.16m0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171418805.824:64467): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61b520 a2=7fff98827140 a3=61b5c0 items=0 ppid=12838 pid=12843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171419001.378:64468): user pid=12869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419001.378:64469): login pid=12869 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171419001.379:64470): user pid=12870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419001.379:64471): login pid=12870 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171419001.381:64472): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419001.381:64473): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171419001.393:64474): user pid=12870 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419001.393:64475): user pid=12870 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171419001.402:64476): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171419001.403:64477): user pid=12869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171419301.716:64478): user pid=12925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419301.716:64479): login pid=12925 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171419301.720:64480): user pid=12925 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419301.720:64481): user pid=12925 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171419498.666:64482): avc:  denied  { create } for  pid=12966 comm="pyzor" name="qAqhfl" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419498.666:64482): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171419498.667:64483): avc:  denied  { getattr } for  pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419498.667:64483): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8816ba10 a2=7fff8816ba10 a3=2 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171419498.667:64483):  path="/tmp/qAqhfl"
>type=AVC msg=audit(1171419498.667:64484): avc:  denied  { write } for  pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419498.667:64484): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171419498.667:64484):  path="/tmp/qAqhfl"
>type=AVC msg=audit(1171419498.667:64485): avc:  denied  { unlink } for  pid=12966 comm="pyzor" name="qAqhfl" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419498.667:64485): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171419498.669:64486): avc:  denied  { read } for  pid=12966 comm="pyzor" name="tmpaKI6MG" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419498.669:64486): arch=c000003e syscall=0 success=yes exit=1854 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=12966 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171419498.669:64486):  path=2F746D702F746D70614B49364D47202864656C6574656429
>type=AVC msg=audit(1171419505.500:64487): avc:  denied  { append } for  pid=12962 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171419505.500:64487): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=12957 pid=12962 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171419601.055:64488): user pid=12980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419601.055:64489): login pid=12980 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171419601.055:64490): user pid=12979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419601.056:64491): login pid=12979 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171419601.061:64492): user pid=12980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419601.061:64493): user pid=12980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171419601.068:64494): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419601.068:64495): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171419601.089:64496): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171419601.089:64497): user pid=12979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171419901.385:64498): user pid=13017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171419901.385:64499): login pid=13017 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171419901.388:64500): user pid=13017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171419901.388:64501): user pid=13017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171420201.705:64502): user pid=13054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171420201.705:64503): login pid=13054 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171420201.706:64504): user pid=13053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171420201.707:64505): login pid=13053 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171420201.711:64506): user pid=13054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171420201.711:64507): user pid=13054 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171420201.714:64508): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171420201.714:64509): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171420201.738:64510): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171420201.738:64511): user pid=13053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171420501.035:64512): user pid=13090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171420501.035:64513): login pid=13090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171420501.039:64514): user pid=13090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171420501.039:64515): user pid=13090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171420801.361:64516): user pid=13124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171420801.361:64517): login pid=13124 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171420801.363:64518): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171420801.364:64519): login pid=13125 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171420801.367:64520): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171420801.367:64521): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171420801.369:64522): user pid=13125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171420801.369:64523): user pid=13125 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171420801.388:64524): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171420801.389:64525): user pid=13124 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171421101.703:64526): user pid=13161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171421101.703:64527): login pid=13161 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171421101.706:64528): user pid=13161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171421101.706:64529): user pid=13161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171421109.906:64530): avc:  denied  { search } for  pid=13183 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171421109.906:64530): avc:  denied  { write } for  pid=13183 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171421109.906:64530): avc:  denied  { add_name } for  pid=13183 comm="pyzor" name="ER1XwU" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171421109.906:64530): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=13183 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171421109.907:64531): avc:  denied  { remove_name } for  pid=13183 comm="pyzor" name="ER1XwU" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171421109.907:64531): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=13183 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171421114.868:64532): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171421114.868:64532): arch=c000003e syscall=62 success=yes exit=0 a0=337f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171421114.985:64533): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421114.985:64533): arch=c000003e syscall=2 success=yes exit=9 a0=32bb800 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171421115.036:64534): avc:  denied  { write } for  pid=13179 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171421115.036:64534): avc:  denied  { add_name } for  pid=13179 comm="procmail" name="_7ND.7en0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171421115.036:64534): arch=c000003e syscall=2 success=yes exit=6 a0=61c7f0 a1=c1 a2=124 a3=61c7f0 items=0 ppid=13174 pid=13179 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171421115.037:64535): avc:  denied  { remove_name } for  pid=13179 comm="procmail" name="_7ND.7en0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171421115.037:64535): arch=c000003e syscall=87 success=yes exit=0 a0=61c7f0 a1=61b520 a2=7fffeb8d21e0 a3=61c7f0 items=0 ppid=13174 pid=13179 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171421401.031:64536): user pid=13204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171421401.031:64537): login pid=13204 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171421401.033:64538): user pid=13205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171421401.034:64539): login pid=13205 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171421401.037:64540): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171421401.037:64541): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171421401.040:64542): user pid=13205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171421401.040:64543): user pid=13205 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171421401.057:64544): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171421401.057:64545): user pid=13204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171421414.632:64546): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421414.632:64546): arch=c000003e syscall=2 success=yes exit=12 a0=33496d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171421414.633:64547): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421414.633:64547): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171421414.633:64547):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171421414.638:64548): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421414.638:64548): arch=c000003e syscall=2 success=yes exit=9 a0=32fe7e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171421415.207:64549): avc:  denied  { getattr } for  pid=13227 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421415.207:64549): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff3340eca0 a2=7fff3340eca0 a3=6c6280 items=0 ppid=29238 pid=13227 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171421415.207:64549):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171421415.207:64550): avc:  denied  { read } for  pid=13227 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421415.207:64550): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13227 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171421420.236:64551): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421420.236:64551): arch=c000003e syscall=86 success=yes exit=0 a0=315a3c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171421420.236:64552): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171421420.236:64552): arch=c000003e syscall=87 success=yes exit=0 a0=315a3c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171421701.368:64553): user pid=13251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171421701.368:64554): login pid=13251 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171421701.372:64555): user pid=13251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171421701.372:64556): user pid=13251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171422001.707:64557): user pid=13284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422001.707:64558): login pid=13284 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171422001.710:64559): user pid=13285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422001.710:64560): login pid=13285 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171422001.712:64561): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422001.712:64562): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171422001.721:64563): user pid=13285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422001.721:64564): user pid=13285 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171422001.731:64565): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171422001.731:64566): user pid=13284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171422061.038:64567): user pid=13300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422061.038:64568): login pid=13300 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171422061.041:64569): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422061.042:64570): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171422061.926:64571): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171422061.926:64572): user pid=13300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171422301.933:64573): user pid=13336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422301.933:64574): login pid=13336 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171422301.937:64575): user pid=13336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422301.937:64576): user pid=13336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171422573.433:64577): avc:  denied  { create } for  pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171422573.433:64577): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171422573.434:64578): avc:  denied  { write } for  pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171422573.434:64578): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171422573.434:64578):  path="/home/dhighley/_-QD.t1n0FB.douglas"
>type=AVC msg=audit(1171422573.434:64579): avc:  denied  { getattr } for  pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171422573.434:64579): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffb9cc06b0 a2=7fffb9cc06b0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171422573.434:64579):  path="/home/dhighley/_-QD.t1n0FB.douglas"
>type=AVC msg=audit(1171422573.434:64580): avc:  denied  { link } for  pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171422573.434:64580): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffb9cc05d0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171422573.434:64581): avc:  denied  { unlink } for  pid=13374 comm="procmail" name="_-QD.t1n0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171422573.434:64581): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffb9cc05d0 a3=61a500 items=0 ppid=13369 pid=13374 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171422601.260:64582): user pid=13382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422601.260:64583): login pid=13382 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171422601.262:64584): user pid=13383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422601.262:64585): login pid=13383 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171422601.264:64586): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422601.264:64587): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171422601.276:64588): user pid=13383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422601.276:64589): user pid=13383 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171422601.284:64590): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171422601.284:64591): user pid=13382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171422901.608:64592): user pid=13420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171422901.609:64593): login pid=13420 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171422901.613:64594): user pid=13420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171422901.613:64595): user pid=13420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171423201.933:64596): user pid=13455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171423201.933:64597): login pid=13455 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171423201.935:64598): user pid=13456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171423201.935:64599): login pid=13456 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171423201.939:64600): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171423201.939:64601): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171423201.941:64602): user pid=13456 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171423201.941:64603): user pid=13456 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171423201.967:64604): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171423201.967:64605): user pid=13455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171423501.271:64606): user pid=13490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171423501.271:64607): login pid=13490 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171423501.274:64608): user pid=13490 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171423501.274:64609): user pid=13490 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171423801.593:64610): user pid=13524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171423801.593:64611): login pid=13524 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171423801.595:64612): user pid=13525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171423801.595:64613): login pid=13525 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171423801.599:64614): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171423801.599:64615): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171423801.604:64616): user pid=13525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171423801.604:64617): user pid=13525 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171423801.622:64618): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171423801.623:64619): user pid=13524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171424101.935:64620): user pid=13561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171424101.936:64621): login pid=13561 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171424101.939:64622): user pid=13561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171424101.939:64623): user pid=13561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171424401.267:64624): user pid=13600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171424401.268:64625): login pid=13600 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171424401.269:64626): user pid=13599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171424401.269:64627): login pid=13599 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171424401.273:64628): user pid=13600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171424401.273:64629): user pid=13600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171424401.278:64630): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171424401.278:64631): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171424401.297:64632): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171424401.298:64633): user pid=13599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171424692.541:64634): avc:  denied  { search } for  pid=13646 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171424692.541:64634): avc:  denied  { write } for  pid=13646 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171424692.541:64634): avc:  denied  { add_name } for  pid=13646 comm="pyzor" name="Q7CnE_" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171424692.541:64634): avc:  denied  { create } for  pid=13646 comm="pyzor" name="Q7CnE_" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171424692.541:64634): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171424692.542:64635): avc:  denied  { getattr } for  pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171424692.542:64635): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff67423cd0 a2=7fff67423cd0 a3=2 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171424692.542:64635):  path="/tmp/Q7CnE_"
>type=AVC msg=audit(1171424692.542:64636): avc:  denied  { write } for  pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171424692.542:64636): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171424692.542:64636):  path="/tmp/Q7CnE_"
>type=AVC msg=audit(1171424692.542:64637): avc:  denied  { remove_name } for  pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171424692.542:64637): avc:  denied  { unlink } for  pid=13646 comm="pyzor" name="Q7CnE_" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171424692.542:64637): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171424692.548:64638): avc:  denied  { read } for  pid=13646 comm="pyzor" name="tmpNUKSat" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171424692.548:64638): arch=c000003e syscall=0 success=yes exit=2478 a0=4 a1=2aaaaf34d000 a2=1000 a3=1f5 items=0 ppid=29238 pid=13646 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171424692.548:64638):  path=2F746D702F746D704E554B536174202864656C6574656429
>type=USER_ACCT msg=audit(1171424701.610:64639): user pid=13647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171424701.610:64640): login pid=13647 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171424701.614:64641): user pid=13647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171424701.614:64642): user pid=13647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171425001.942:64643): user pid=13688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425001.943:64644): login pid=13688 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171425001.945:64645): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425001.945:64646): login pid=13689 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171425001.947:64647): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425001.947:64648): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171425001.959:64649): user pid=13689 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425001.960:64650): user pid=13689 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171425001.968:64651): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171425001.968:64652): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171425301.297:64653): user pid=13726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425301.297:64654): login pid=13726 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171425301.301:64655): user pid=13726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425301.301:64656): user pid=13726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171425462.694:64657): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425462.694:64657): arch=c000003e syscall=2 success=yes exit=12 a0=35f5800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171425462.694:64658): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425462.694:64658): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171425462.694:64658):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171425462.700:64659): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425462.700:64659): arch=c000003e syscall=2 success=yes exit=9 a0=3218920 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171425463.224:64660): avc:  denied  { getattr } for  pid=13758 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425463.224:64660): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7ffff9058000 a2=7ffff9058000 a3=6c6280 items=0 ppid=29238 pid=13758 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171425463.224:64660):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171425463.225:64661): avc:  denied  { read } for  pid=13758 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425463.225:64661): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13758 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171425468.201:64662): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.201:64662): arch=c000003e syscall=86 success=yes exit=0 a0=3363300 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171425468.201:64663): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634173 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.201:64663): arch=c000003e syscall=87 success=yes exit=0 a0=3363300 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171425468.202:64664): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.202:64664): arch=c000003e syscall=2 success=yes exit=9 a0=30dbf40 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171425468.216:64665): avc:  denied  { write } for  pid=13754 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171425468.216:64665): avc:  denied  { add_name } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171425468.216:64665): avc:  denied  { create } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.216:64665): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171425468.216:64666): avc:  denied  { write } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.216:64666): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171425468.216:64666):  path="/home/dhighley/_6WD.8io0FB.douglas"
>type=AVC msg=audit(1171425468.216:64667): avc:  denied  { getattr } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.216:64667): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fffe3da07a0 a2=7fffe3da07a0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171425468.216:64667):  path="/home/dhighley/_6WD.8io0FB.douglas"
>type=AVC msg=audit(1171425468.216:64668): avc:  denied  { link } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.216:64668): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffe3da06c0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171425468.216:64669): avc:  denied  { remove_name } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171425468.216:64669): avc:  denied  { unlink } for  pid=13754 comm="procmail" name="_6WD.8io0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.216:64669): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fffe3da06c0 a3=61a500 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171425468.217:64670): avc:  denied  { append } for  pid=13754 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171425468.217:64670): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=13749 pid=13754 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171425601.629:64671): user pid=13772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425601.629:64672): login pid=13772 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171425601.631:64673): user pid=13773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425601.632:64674): login pid=13773 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171425601.634:64675): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425601.634:64676): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171425601.639:64677): user pid=13773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425601.639:64678): user pid=13773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171425601.654:64679): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171425601.654:64680): user pid=13772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171425661.960:64681): user pid=13788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425661.960:64682): login pid=13788 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171425661.965:64683): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425661.965:64684): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171425662.844:64685): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171425662.844:64686): user pid=13788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171425901.852:64687): user pid=13827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171425901.852:64688): login pid=13827 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171425901.857:64689): user pid=13827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171425901.857:64690): user pid=13827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171426201.178:64691): user pid=13861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171426201.178:64692): login pid=13861 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171426201.180:64693): user pid=13862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171426201.180:64694): login pid=13862 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171426201.184:64695): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171426201.185:64696): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171426201.191:64697): user pid=13862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171426201.191:64698): user pid=13862 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171426201.216:64699): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171426201.217:64700): user pid=13861 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171426446.694:64701): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171426446.694:64702): user pid=12762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171426501.698:64703): user pid=13906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171426501.698:64704): login pid=13906 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171426501.702:64705): user pid=13906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171426501.703:64706): user pid=13906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171426801.029:64707): user pid=13938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171426801.030:64708): login pid=13938 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171426801.032:64709): user pid=13939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171426801.032:64710): login pid=13939 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171426801.034:64711): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171426801.034:64712): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171426801.038:64713): user pid=13939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171426801.038:64714): user pid=13939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171426801.054:64715): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171426801.054:64716): user pid=13938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171426859.598:64717): avc:  denied  { search } for  pid=13964 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171426859.598:64717): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=13964 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171427101.379:64718): user pid=13986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171427101.379:64719): login pid=13986 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171427101.382:64720): user pid=13986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171427101.382:64721): user pid=13986 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171427401.701:64722): user pid=14022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171427401.701:64723): login pid=14022 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171427401.702:64724): user pid=14021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171427401.703:64725): login pid=14021 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171427401.706:64726): user pid=14022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171427401.706:64727): user pid=14022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171427401.709:64728): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171427401.709:64729): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171427401.733:64730): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171427401.734:64731): user pid=14021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171427658.247:64732): avc:  denied  { search } for  pid=14065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171427658.247:64732): avc:  denied  { write } for  pid=14065 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171427658.247:64732): avc:  denied  { add_name } for  pid=14065 comm="pyzor" name="xh_P3d" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171427658.247:64732): avc:  denied  { create } for  pid=14065 comm="pyzor" name="xh_P3d" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427658.247:64732): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171427658.248:64733): avc:  denied  { getattr } for  pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427658.248:64733): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff430f59a0 a2=7fff430f59a0 a3=2 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427658.248:64733):  path="/tmp/xh_P3d"
>type=AVC msg=audit(1171427658.248:64734): avc:  denied  { write } for  pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427658.248:64734): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427658.248:64734):  path="/tmp/xh_P3d"
>type=AVC msg=audit(1171427658.248:64735): avc:  denied  { remove_name } for  pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171427658.248:64735): avc:  denied  { unlink } for  pid=14065 comm="pyzor" name="xh_P3d" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427658.248:64735): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14065 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171427658.730:64736): avc:  denied  { write } for  pid=14061 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171427658.730:64736): avc:  denied  { add_name } for  pid=14061 comm="procmail" name="_tbD.KFp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171427658.730:64736): arch=c000003e syscall=2 success=yes exit=6 a0=61c550 a1=c1 a2=124 a3=61c550 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171427658.730:64737): avc:  denied  { remove_name } for  pid=14061 comm="procmail" name="_tbD.KFp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171427658.730:64737): arch=c000003e syscall=87 success=yes exit=0 a0=61c550 a1=61b520 a2=7fffa1199ab0 a3=61c550 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171427658.730:64738): avc:  denied  { append } for  pid=14061 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427658.730:64738): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14056 pid=14061 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171427701.033:64739): user pid=14069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171427701.034:64740): login pid=14069 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171427701.036:64741): user pid=14069 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171427701.036:64742): user pid=14069 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171427800.745:64743): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427800.745:64743): arch=c000003e syscall=2 success=yes exit=9 a0=3720cd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171427801.327:64744): avc:  denied  { getattr } for  pid=14095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427801.327:64744): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff438ab850 a2=7fff438ab850 a3=6c6280 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427801.327:64744):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171427801.327:64745): avc:  denied  { read } for  pid=14095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427801.327:64745): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171427801.331:64746): avc:  denied  { read } for  pid=14095 comm="pyzor" name="tmptNJZG8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427801.331:64746): arch=c000003e syscall=0 success=yes exit=4096 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=14095 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427801.331:64746):  path=2F746D702F746D70744E4A5A4738202864656C6574656429
>type=AVC msg=audit(1171427806.289:64747): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171427806.289:64747): arch=c000003e syscall=62 success=yes exit=0 a0=370f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171427806.505:64748): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.505:64748): arch=c000003e syscall=2 success=yes exit=9 a0=32766e0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171427806.735:64749): avc:  denied  { create } for  pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.735:64749): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171427806.735:64750): avc:  denied  { write } for  pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.735:64750): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427806.735:64750):  path="/home/dhighley/_LcD.eHp0FB.douglas"
>type=AVC msg=audit(1171427806.736:64751): avc:  denied  { getattr } for  pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.736:64751): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff30acf4c0 a2=7fff30acf4c0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171427806.736:64751):  path="/home/dhighley/_LcD.eHp0FB.douglas"
>type=AVC msg=audit(1171427806.736:64752): avc:  denied  { link } for  pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.736:64752): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e6c0 a2=7fff30acf3e0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171427806.736:64753): avc:  denied  { unlink } for  pid=14091 comm="procmail" name="_LcD.eHp0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171427806.736:64753): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e6c0 a2=7fff30acf3e0 a3=61b650 items=0 ppid=14088 pid=14091 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171427898.107:64754): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171427898.108:64755): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171427910.210:64756): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171427910.211:64757): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171427910.221:64758): user pid=30241 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171427910.223:64759): login pid=30241 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171427910.262:64760): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171427910.263:64761): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171428001.364:64762): user pid=14331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428001.365:64763): login pid=14331 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171428001.367:64764): user pid=14332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428001.368:64765): login pid=14332 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171428001.368:64766): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428001.369:64767): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171428001.379:64768): user pid=14332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428001.379:64769): user pid=14332 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171428001.395:64770): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171428001.396:64771): user pid=14331 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171428301.709:64772): user pid=14393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428301.709:64773): login pid=14393 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171428301.712:64774): user pid=14393 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428301.713:64775): user pid=14393 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171428325.210:64776): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.210:64776): arch=c000003e syscall=2 success=yes exit=12 a0=37256f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428325.210:64777): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.210:64777): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.210:64777):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171428325.216:64778): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.216:64778): arch=c000003e syscall=2 success=yes exit=9 a0=336fca0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428325.708:64779): avc:  denied  { search } for  pid=14412 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171428325.708:64779): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428325.708:64780): avc:  denied  { search } for  pid=14412 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171428325.708:64780): arch=c000003e syscall=4 success=yes exit=0 a0=6c6240 a1=7fffa5de6040 a2=7fffa5de6040 a3=6c6240 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428325.708:64781): avc:  denied  { getattr } for  pid=14412 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.708:64781): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffa5de6040 a2=7fffa5de6040 a3=6c6280 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.708:64781):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171428325.709:64782): avc:  denied  { read } for  pid=14412 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.709:64782): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428325.709:64783): avc:  denied  { search } for  pid=14412 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.709:64783): avc:  denied  { write } for  pid=14412 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.709:64783): avc:  denied  { add_name } for  pid=14412 comm="pyzor" name="G6FgvH" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.709:64783): avc:  denied  { create } for  pid=14412 comm="pyzor" name="G6FgvH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.709:64783): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428325.710:64784): avc:  denied  { getattr } for  pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.710:64784): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa5de4940 a2=7fffa5de4940 a3=2 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.710:64784):  path="/tmp/G6FgvH"
>type=AVC msg=audit(1171428325.710:64785): avc:  denied  { write } for  pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.710:64785): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.710:64785):  path="/tmp/G6FgvH"
>type=AVC msg=audit(1171428325.710:64786): avc:  denied  { remove_name } for  pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.710:64786): avc:  denied  { unlink } for  pid=14412 comm="pyzor" name="G6FgvH" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.710:64786): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14412 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428325.738:64787): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.738:64787): arch=c000003e syscall=86 success=yes exit=0 a0=3201940 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428325.738:64788): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.738:64788): arch=c000003e syscall=87 success=yes exit=0 a0=3201940 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428325.739:64789): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.739:64789): arch=c000003e syscall=2 success=yes exit=9 a0=349a1c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428325.822:64790): avc:  denied  { write } for  pid=14408 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.822:64790): avc:  denied  { add_name } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.822:64790): avc:  denied  { create } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.822:64790): arch=c000003e syscall=2 success=yes exit=6 a0=61c5a0 a1=c1 a2=124 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428325.823:64791): avc:  denied  { write } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.823:64791): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.823:64791):  path="/home/dhighley/_IhD.lPp0FB.douglas"
>type=AVC msg=audit(1171428325.823:64792): avc:  denied  { getattr } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.823:64792): arch=c000003e syscall=4 success=yes exit=0 a0=61c5a0 a1=7fff779ea3e0 a2=7fff779ea3e0 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428325.823:64792):  path="/home/dhighley/_IhD.lPp0FB.douglas"
>type=AVC msg=audit(1171428325.823:64793): avc:  denied  { link } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.823:64793): arch=c000003e syscall=86 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fff779ea300 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428325.823:64794): avc:  denied  { remove_name } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428325.823:64794): avc:  denied  { unlink } for  pid=14408 comm="procmail" name="_IhD.lPp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.823:64794): arch=c000003e syscall=87 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fff779ea300 a3=61c5a0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428325.823:64795): avc:  denied  { append } for  pid=14408 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428325.823:64795): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14405 pid=14408 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428447.349:64796): avc:  denied  { create } for  pid=14431 comm="pyzor" name="prc941" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428447.349:64796): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428447.350:64797): avc:  denied  { getattr } for  pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428447.350:64797): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb6216ac0 a2=7fffb6216ac0 a3=2 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428447.350:64797):  path="/tmp/prc941"
>type=AVC msg=audit(1171428447.350:64798): avc:  denied  { write } for  pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428447.350:64798): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428447.350:64798):  path="/tmp/prc941"
>type=AVC msg=audit(1171428447.350:64799): avc:  denied  { unlink } for  pid=14431 comm="pyzor" name="prc941" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428447.350:64799): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428447.352:64800): avc:  denied  { read } for  pid=14431 comm="pyzor" name="tmpQl1QeQ" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428447.352:64800): arch=c000003e syscall=0 success=yes exit=648 a0=4 a1=2aaaaf34d000 a2=1000 a3=b2 items=0 ppid=29238 pid=14431 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428447.352:64800):  path=2F746D702F746D70516C31516551202864656C6574656429
>type=AVC msg=audit(1171428452.311:64801): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171428452.311:64801): arch=c000003e syscall=62 success=yes exit=0 a0=385f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171428601.043:64802): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428601.043:64803): login pid=14625 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171428601.045:64804): user pid=14626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428601.045:64805): login pid=14626 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171428601.048:64806): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428601.049:64807): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171428601.051:64808): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428601.051:64809): user pid=14626 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171428601.076:64810): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171428601.077:64811): user pid=14625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171428685.503:64812): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428685.503:64812): arch=c000003e syscall=2 success=yes exit=12 a0=33cf730 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428685.503:64813): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428685.503:64813): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428685.503:64813):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171428685.512:64814): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428685.512:64814): arch=c000003e syscall=2 success=yes exit=9 a0=335ad00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428686.108:64815): avc:  denied  { getattr } for  pid=14652 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428686.108:64815): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff82002fb0 a2=7fff82002fb0 a3=6c6280 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428686.108:64815):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171428686.108:64816): avc:  denied  { read } for  pid=14652 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428686.108:64816): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428686.109:64817): avc:  denied  { search } for  pid=14652 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428686.109:64817): avc:  denied  { write } for  pid=14652 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171428686.109:64817): avc:  denied  { add_name } for  pid=14652 comm="pyzor" name="NEtBHe" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171428686.109:64817): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428686.109:64818): avc:  denied  { remove_name } for  pid=14652 comm="pyzor" name="NEtBHe" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171428686.109:64818): arch=c000003e syscall=87 success=yes exit=0 a0=6226f0 a1=6d82b0 a2=37a8f2f4d8 a3=6226f0 items=0 ppid=29238 pid=14652 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171428691.069:64819): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171428691.069:64819): arch=c000003e syscall=62 success=yes exit=0 a0=393c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428691.077:64820): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.077:64820): arch=c000003e syscall=86 success=yes exit=0 a0=321a620 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428691.078:64821): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634239 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.078:64821): arch=c000003e syscall=87 success=yes exit=0 a0=321a620 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428691.078:64822): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.078:64822): arch=c000003e syscall=2 success=yes exit=9 a0=32717c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171428691.091:64823): avc:  denied  { write } for  pid=14648 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428691.091:64823): avc:  denied  { add_name } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428691.091:64823): avc:  denied  { create } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.091:64823): arch=c000003e syscall=2 success=yes exit=6 a0=6224d0 a1=c1 a2=124 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428691.092:64824): avc:  denied  { write } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.092:64824): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428691.092:64824):  path="/home/dhighley/_4kD.TVp0FB.douglas"
>type=AVC msg=audit(1171428691.092:64825): avc:  denied  { getattr } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.092:64825): arch=c000003e syscall=4 success=yes exit=0 a0=6224d0 a1=7fff5d343d30 a2=7fff5d343d30 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428691.092:64825):  path="/home/dhighley/_4kD.TVp0FB.douglas"
>type=AVC msg=audit(1171428691.092:64826): avc:  denied  { link } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.092:64826): arch=c000003e syscall=86 success=yes exit=0 a0=6224d0 a1=61b520 a2=7fff5d343c50 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428691.092:64827): avc:  denied  { remove_name } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171428691.092:64827): avc:  denied  { unlink } for  pid=14648 comm="procmail" name="_4kD.TVp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.092:64827): arch=c000003e syscall=87 success=yes exit=0 a0=6224d0 a1=61b520 a2=7fff5d343c50 a3=6224d0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428691.092:64828): avc:  denied  { append } for  pid=14648 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428691.092:64828): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14645 pid=14648 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171428849.968:64829): avc:  denied  { getattr } for  pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428849.968:64829): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff3523d890 a2=7fff3523d890 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428849.968:64829):  path="/bin/hostname"
>type=AVC msg=audit(1171428849.968:64830): avc:  denied  { execute } for  pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428849.968:64830): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171428849.968:64831): avc:  denied  { read } for  pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428849.968:64831): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171428849.968:64832): avc:  denied  { execute_no_trans } for  pid=14668 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171428849.968:64832): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=30535 pid=14668 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171428849.968:64832):  path="/bin/hostname"
>type=USER_ACCT msg=audit(1171428901.398:64833): user pid=14682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171428901.399:64834): login pid=14682 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171428901.401:64835): user pid=14682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171428901.401:64836): user pid=14682 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171429201.739:64837): user pid=14726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429201.739:64838): login pid=14726 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171429201.741:64839): user pid=14727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429201.742:64840): login pid=14727 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171429201.742:64841): user pid=14728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429201.742:64842): login pid=14728 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171429201.743:64843): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429201.743:64844): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171429201.747:64845): user pid=14728 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429201.747:64846): user pid=14728 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171429201.759:64847): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429201.759:64848): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171429201.765:64849): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171429201.765:64850): user pid=14726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171429261.085:64851): user pid=14747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429261.086:64852): login pid=14747 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171429261.089:64853): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429261.090:64854): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171429262.011:64855): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171429262.011:64856): user pid=14747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171429501.021:64857): user pid=14782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429501.022:64858): login pid=14782 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171429501.025:64859): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429501.025:64860): user pid=14782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171429801.357:64861): user pid=14821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429801.358:64862): login pid=14821 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171429801.359:64863): user pid=14822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171429801.359:64864): login pid=14822 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171429801.362:64865): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429801.363:64866): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171429801.365:64867): user pid=14822 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171429801.365:64868): user pid=14822 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171429801.383:64869): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171429801.383:64870): user pid=14821 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171430101.702:64871): user pid=14936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171430101.703:64872): login pid=14936 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171430101.708:64873): user pid=14936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171430101.708:64874): user pid=14936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171430401.043:64875): user pid=14975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171430401.043:64876): login pid=14975 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171430401.044:64877): user pid=14976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171430401.045:64878): login pid=14976 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171430401.049:64879): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171430401.049:64880): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171430401.052:64881): user pid=14976 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171430401.052:64882): user pid=14976 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171430401.078:64883): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171430401.078:64884): user pid=14975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171430482.907:64885): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430482.907:64885): arch=c000003e syscall=2 success=yes exit=9 a0=35fa460 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171430484.055:64886): avc:  denied  { search } for  pid=15002 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171430484.055:64886): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171430484.056:64887): avc:  denied  { getattr } for  pid=15002 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.056:64887): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff88b3bae0 a2=7fff88b3bae0 a3=6c6280 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430484.056:64887):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171430484.056:64888): avc:  denied  { read } for  pid=15002 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.056:64888): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171430484.057:64889): avc:  denied  { search } for  pid=15002 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171430484.057:64889): avc:  denied  { write } for  pid=15002 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171430484.057:64889): avc:  denied  { add_name } for  pid=15002 comm="pyzor" name="IdV15K" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171430484.057:64889): avc:  denied  { create } for  pid=15002 comm="pyzor" name="IdV15K" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.057:64889): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171430484.057:64890): avc:  denied  { getattr } for  pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.057:64890): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff88b3a3e0 a2=7fff88b3a3e0 a3=2 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430484.057:64890):  path="/tmp/IdV15K"
>type=AVC msg=audit(1171430484.057:64891): avc:  denied  { write } for  pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.057:64891): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430484.057:64891):  path="/tmp/IdV15K"
>type=AVC msg=audit(1171430484.058:64892): avc:  denied  { remove_name } for  pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171430484.058:64892): avc:  denied  { unlink } for  pid=15002 comm="pyzor" name="IdV15K" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.058:64892): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171430484.062:64893): avc:  denied  { read } for  pid=15002 comm="pyzor" name="tmp-VZ-dQ" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430484.062:64893): arch=c000003e syscall=0 success=yes exit=2620 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=29238 pid=15002 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430484.062:64893):  path=2F746D702F746D702D565A2D6451202864656C6574656429
>type=AVC msg=audit(1171430489.017:64894): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171430489.017:64894): arch=c000003e syscall=62 success=yes exit=0 a0=3a9a a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171430489.257:64895): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.257:64895): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430489.257:64895):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171430489.257:64896): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.257:64896): arch=c000003e syscall=86 success=yes exit=0 a0=30bfb10 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171430489.258:64897): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634230 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.258:64897): arch=c000003e syscall=87 success=yes exit=0 a0=30bfb10 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171430489.258:64898): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.258:64898): arch=c000003e syscall=2 success=yes exit=9 a0=3762ca0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171430489.328:64899): avc:  denied  { write } for  pid=14998 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171430489.328:64899): avc:  denied  { add_name } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171430489.328:64899): avc:  denied  { create } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.328:64899): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171430489.328:64900): avc:  denied  { write } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.328:64900): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430489.328:64900):  path="/home/dhighley/_WqD.Zxp0FB.douglas"
>type=AVC msg=audit(1171430489.328:64901): avc:  denied  { getattr } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.328:64901): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3fbe95a0 a2=7fff3fbe95a0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171430489.328:64901):  path="/home/dhighley/_WqD.Zxp0FB.douglas"
>type=AVC msg=audit(1171430489.328:64902): avc:  denied  { link } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.328:64902): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d320 a2=7fff3fbe94c0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171430489.328:64903): avc:  denied  { remove_name } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171430489.328:64903): avc:  denied  { unlink } for  pid=14998 comm="procmail" name="_WqD.Zxp0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.328:64903): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d320 a2=7fff3fbe94c0 a3=61b650 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171430489.329:64904): avc:  denied  { append } for  pid=14998 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430489.329:64904): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=14995 pid=14998 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171430701.400:64905): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171430701.400:64906): login pid=15019 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171430701.404:64907): user pid=15019 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171430701.404:64908): user pid=15019 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171430922.776:64909): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171430922.776:64909): arch=c000003e syscall=2 success=yes exit=12 a0=35f5b90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171431001.732:64910): user pid=15067 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431001.732:64911): login pid=15067 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171431001.735:64912): user pid=15068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431001.735:64913): login pid=15068 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171431001.736:64914): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431001.736:64915): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171431001.740:64916): user pid=15068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431001.740:64917): user pid=15068 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171431001.758:64918): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171431001.758:64919): user pid=15067 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171431301.072:64920): user pid=15112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431301.072:64921): login pid=15112 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171431301.075:64922): user pid=15112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431301.076:64923): user pid=15112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171431575.884:64924): avc:  denied  { search } for  pid=15152 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171431575.884:64924): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171431575.885:64925): avc:  denied  { create } for  pid=15152 comm="pyzor" name="4JFAwn" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171431575.885:64925): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171431575.885:64926): avc:  denied  { getattr } for  pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171431575.885:64926): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2e9cce60 a2=7fff2e9cce60 a3=3 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171431575.885:64926):  path="/tmp/4JFAwn"
>type=AVC msg=audit(1171431575.885:64927): avc:  denied  { write } for  pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171431575.885:64927): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171431575.885:64927):  path="/tmp/4JFAwn"
>type=AVC msg=audit(1171431575.886:64928): avc:  denied  { unlink } for  pid=15152 comm="pyzor" name="4JFAwn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171431575.886:64928): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171431575.887:64929): avc:  denied  { read } for  pid=15152 comm="pyzor" name="tmp_oAGPG" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171431575.887:64929): arch=c000003e syscall=0 success=yes exit=1090 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=15152 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171431575.887:64929):  path=2F746D702F746D705F6F41475047202864656C6574656429
>type=USER_ACCT msg=audit(1171431601.404:64930): user pid=15158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431601.405:64931): login pid=15158 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171431601.407:64932): user pid=15159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431601.407:64933): login pid=15159 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171431601.408:64934): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431601.408:64935): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171431601.414:64936): user pid=15159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431601.414:64937): user pid=15159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171431601.427:64938): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171431601.428:64939): user pid=15158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171431818.173:64940): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171431818.173:64941): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171431818.188:64942): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171431818.188:64943): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171431821.054:64944): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171431821.054:64945): user pid=14846 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1171431833.234:64946): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171431833.235:64947): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171431833.250:64948): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171431833.250:64949): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171431901.779:64950): user pid=15287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171431901.779:64951): login pid=15287 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171431901.783:64952): user pid=15287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171431901.783:64953): user pid=15287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171431982.411:64954): user pid=15244 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=phighley : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171432201.116:64955): user pid=15350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432201.116:64956): login pid=15350 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171432201.117:64957): user pid=15349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432201.118:64958): login pid=15349 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171432201.120:64959): user pid=15350 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432201.120:64960): user pid=15350 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171432201.123:64961): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432201.123:64962): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171432201.148:64963): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171432201.149:64964): user pid=15349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171432471.681:64965): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171432471.682:64966): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171432501.459:64967): user pid=15446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432501.460:64968): login pid=15446 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171432501.463:64969): user pid=15446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432501.463:64970): user pid=15446 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171432559.115:64971): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432559.115:64971): arch=c000003e syscall=2 success=yes exit=12 a0=35c1cd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171432559.115:64972): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432559.115:64972): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171432559.115:64972):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171432559.120:64973): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432559.120:64973): arch=c000003e syscall=2 success=yes exit=9 a0=2d66ef0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171432559.886:64974): avc:  denied  { search } for  pid=15469 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171432559.886:64974): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171432559.887:64975): avc:  denied  { getattr } for  pid=15469 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432559.887:64975): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff85af4b80 a2=7fff85af4b80 a3=6c6280 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171432559.887:64975):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171432559.887:64976): avc:  denied  { read } for  pid=15469 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432559.887:64976): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171432559.887:64977): avc:  denied  { search } for  pid=15469 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171432559.887:64977): avc:  denied  { write } for  pid=15469 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171432559.887:64977): avc:  denied  { add_name } for  pid=15469 comm="pyzor" name="KoqSfb" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171432559.887:64977): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171432559.888:64978): avc:  denied  { remove_name } for  pid=15469 comm="pyzor" name="KoqSfb" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171432559.888:64978): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15469 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171432560.256:64979): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.256:64979): arch=c000003e syscall=86 success=yes exit=0 a0=3603110 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171432560.256:64980): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.256:64980): arch=c000003e syscall=87 success=yes exit=0 a0=3603110 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171432560.257:64981): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.257:64981): arch=c000003e syscall=2 success=yes exit=9 a0=31fa460 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171432560.273:64982): avc:  denied  { write } for  pid=15465 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171432560.273:64982): avc:  denied  { add_name } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171432560.273:64982): avc:  denied  { create } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.273:64982): arch=c000003e syscall=2 success=yes exit=6 a0=61c4b0 a1=c1 a2=124 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171432560.274:64983): avc:  denied  { write } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.274:64983): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171432560.274:64983):  path="/home/dhighley/_pxD.wRq0FB.douglas"
>type=AVC msg=audit(1171432560.274:64984): avc:  denied  { getattr } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.274:64984): arch=c000003e syscall=4 success=yes exit=0 a0=61c4b0 a1=7fff7a188b80 a2=7fff7a188b80 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171432560.274:64984):  path="/home/dhighley/_pxD.wRq0FB.douglas"
>type=AVC msg=audit(1171432560.274:64985): avc:  denied  { link } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.274:64985): arch=c000003e syscall=86 success=yes exit=0 a0=61c4b0 a1=61b520 a2=7fff7a188aa0 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171432560.274:64986): avc:  denied  { remove_name } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171432560.274:64986): avc:  denied  { unlink } for  pid=15465 comm="procmail" name="_pxD.wRq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.274:64986): arch=c000003e syscall=87 success=yes exit=0 a0=61c4b0 a1=61b520 a2=7fff7a188aa0 a3=61c4b0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171432560.274:64987): avc:  denied  { append } for  pid=15465 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171432560.274:64987): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15462 pid=15465 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171432774.232:64988): avc:  denied  { search } for  pid=15504 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171432774.232:64988): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15504 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171432779.195:64989): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171432779.195:64989): arch=c000003e syscall=62 success=yes exit=0 a0=3c90 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171432801.801:64990): user pid=15509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432801.802:64991): login pid=15509 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171432801.804:64992): user pid=15510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432801.805:64993): login pid=15510 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171432801.805:64994): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432801.805:64995): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171432801.817:64996): user pid=15510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432801.817:64997): user pid=15510 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171432801.829:64998): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171432801.830:64999): user pid=15509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171432861.140:65000): user pid=15525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171432861.140:65001): login pid=15525 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171432861.144:65002): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171432861.144:65003): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171432862.031:65004): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171432862.031:65005): user pid=15525 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171433101.040:65006): user pid=15561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171433101.040:65007): login pid=15561 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171433101.043:65008): user pid=15561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171433101.043:65009): user pid=15561 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171433401.367:65010): user pid=15599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171433401.367:65011): login pid=15599 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171433401.369:65012): user pid=15600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171433401.370:65013): login pid=15600 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171433401.370:65014): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171433401.370:65015): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171433401.374:65016): user pid=15600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171433401.375:65017): user pid=15600 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171433401.396:65018): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171433401.397:65019): user pid=15599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171433701.707:65020): user pid=15638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171433701.707:65021): login pid=15638 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171433701.711:65022): user pid=15638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171433701.711:65023): user pid=15638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171434001.030:65024): user pid=15671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434001.030:65025): login pid=15671 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171434001.032:65026): user pid=15672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434001.032:65027): login pid=15672 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171434001.036:65028): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434001.037:65029): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171434001.040:65030): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434001.040:65031): user pid=15672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171434001.066:65032): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171434001.067:65033): user pid=15671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171434301.371:65034): user pid=15707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434301.371:65035): login pid=15707 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171434301.375:65036): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434301.375:65037): user pid=15707 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171434428.696:65038): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434428.696:65038): arch=c000003e syscall=2 success=yes exit=12 a0=3562240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434428.696:65039): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434428.696:65039): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171434428.696:65039):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171434428.702:65040): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434428.702:65040): arch=c000003e syscall=2 success=yes exit=9 a0=3335270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434429.313:65041): avc:  denied  { getattr } for  pid=15736 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434429.313:65041): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff75e21dc0 a2=7fff75e21dc0 a3=6c6280 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171434429.313:65041):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171434429.314:65042): avc:  denied  { read } for  pid=15736 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434429.314:65042): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171434429.314:65043): avc:  denied  { search } for  pid=15736 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171434429.314:65043): avc:  denied  { write } for  pid=15736 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171434429.314:65043): avc:  denied  { add_name } for  pid=15736 comm="pyzor" name="K7LDWQ" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171434429.314:65043): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171434429.315:65044): avc:  denied  { remove_name } for  pid=15736 comm="pyzor" name="K7LDWQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171434429.315:65044): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=15736 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171434434.275:65045): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171434434.275:65045): arch=c000003e syscall=62 success=yes exit=0 a0=3d78 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434434.290:65046): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.290:65046): arch=c000003e syscall=86 success=yes exit=0 a0=304a690 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434434.290:65047): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634240 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.290:65047): arch=c000003e syscall=87 success=yes exit=0 a0=304a690 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434434.291:65048): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.291:65048): arch=c000003e syscall=2 success=yes exit=9 a0=2fc44a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171434434.352:65049): avc:  denied  { write } for  pid=15732 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171434434.352:65049): avc:  denied  { add_name } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171434434.352:65049): avc:  denied  { create } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.352:65049): arch=c000003e syscall=2 success=yes exit=6 a0=61cbc0 a1=c1 a2=124 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171434434.352:65050): avc:  denied  { write } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.352:65050): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171434434.352:65050):  path="/home/dhighley/_01D.Cvq0FB.douglas"
>type=AVC msg=audit(1171434434.352:65051): avc:  denied  { getattr } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.352:65051): arch=c000003e syscall=4 success=yes exit=0 a0=61cbc0 a1=7fffb369a090 a2=7fffb369a090 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171434434.352:65051):  path="/home/dhighley/_01D.Cvq0FB.douglas"
>type=AVC msg=audit(1171434434.352:65052): avc:  denied  { link } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.352:65052): arch=c000003e syscall=86 success=yes exit=0 a0=61cbc0 a1=61b520 a2=7fffb3699fb0 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171434434.352:65053): avc:  denied  { remove_name } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171434434.352:65053): avc:  denied  { unlink } for  pid=15732 comm="procmail" name="_01D.Cvq0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.352:65053): arch=c000003e syscall=87 success=yes exit=0 a0=61cbc0 a1=61b520 a2=7fffb3699fb0 a3=61cbc0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171434434.353:65054): avc:  denied  { append } for  pid=15732 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171434434.353:65054): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=15727 pid=15732 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171434601.694:65055): user pid=15754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434601.694:65056): login pid=15754 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171434601.696:65057): user pid=15755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434601.696:65058): login pid=15755 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171434601.698:65059): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434601.698:65060): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171434601.702:65061): user pid=15755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434601.703:65062): user pid=15755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171434601.720:65063): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171434601.720:65064): user pid=15754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171434901.043:65065): user pid=15793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171434901.043:65066): login pid=15793 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171434901.047:65067): user pid=15793 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171434901.047:65068): user pid=15793 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171434922.236:65069): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171434922.237:65070): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171434932.379:65071): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171434932.380:65072): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171434932.389:65073): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171434932.394:65074): login pid=30241 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171434932.403:65075): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171434932.404:65076): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171435201.379:65077): user pid=16136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171435201.379:65078): login pid=16136 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171435201.383:65079): user pid=16135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171435201.383:65080): login pid=16135 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171435201.385:65081): user pid=16136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171435201.385:65082): user pid=16136 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171435201.389:65083): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171435201.389:65084): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171435201.417:65085): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171435201.418:65086): user pid=16135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171435292.110:65087): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.110:65087): arch=c000003e syscall=2 success=yes exit=12 a0=33cb710 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435292.110:65088): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.110:65088): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435292.110:65088):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171435292.117:65089): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.117:65089): arch=c000003e syscall=2 success=yes exit=9 a0=375d3b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435292.735:65090): avc:  denied  { search } for  pid=16207 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171435292.735:65090): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435292.735:65091): avc:  denied  { getattr } for  pid=16207 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.735:65091): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb2157100 a2=7fffb2157100 a3=6c6280 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435292.735:65091):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171435292.736:65092): avc:  denied  { read } for  pid=16207 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.736:65092): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435292.736:65093): avc:  denied  { search } for  pid=16207 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435292.736:65093): avc:  denied  { write } for  pid=16207 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435292.736:65093): avc:  denied  { add_name } for  pid=16207 comm="pyzor" name="jwMzsp" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435292.736:65093): avc:  denied  { create } for  pid=16207 comm="pyzor" name="jwMzsp" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.736:65093): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435292.737:65094): avc:  denied  { getattr } for  pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.737:65094): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb21555f0 a2=7fffb21555f0 a3=3 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435292.737:65094):  path="/tmp/jwMzsp"
>type=AVC msg=audit(1171435292.737:65095): avc:  denied  { write } for  pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.737:65095): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435292.737:65095):  path="/tmp/jwMzsp"
>type=AVC msg=audit(1171435292.737:65096): avc:  denied  { remove_name } for  pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435292.737:65096): avc:  denied  { unlink } for  pid=16207 comm="pyzor" name="jwMzsp" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.737:65096): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435292.739:65097): avc:  denied  { read } for  pid=16207 comm="pyzor" name="tmpTStOxC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435292.739:65097): arch=c000003e syscall=0 success=yes exit=1041 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d88f4 items=0 ppid=29238 pid=16207 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435292.739:65097):  path=2F746D702F746D705453744F7843202864656C6574656429
>type=AVC msg=audit(1171435297.698:65098): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171435297.698:65098): arch=c000003e syscall=62 success=yes exit=0 a0=3f4f a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435297.768:65099): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.768:65099): arch=c000003e syscall=86 success=yes exit=0 a0=338e2f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435297.768:65100): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.768:65100): arch=c000003e syscall=87 success=yes exit=0 a0=338e2f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435297.769:65101): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.769:65101): arch=c000003e syscall=2 success=yes exit=9 a0=3131990 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435297.840:65102): avc:  denied  { write } for  pid=16203 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171435297.840:65102): avc:  denied  { add_name } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171435297.840:65102): avc:  denied  { create } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.840:65102): arch=c000003e syscall=2 success=yes exit=6 a0=61b640 a1=c1 a2=124 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171435297.841:65103): avc:  denied  { write } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.841:65103): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435297.841:65103):  path="/home/dhighley/_L9D.h8q0FB.douglas"
>type=AVC msg=audit(1171435297.841:65104): avc:  denied  { getattr } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.841:65104): arch=c000003e syscall=4 success=yes exit=0 a0=61b640 a1=7fffbd398d90 a2=7fffbd398d90 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435297.841:65104):  path="/home/dhighley/_L9D.h8q0FB.douglas"
>type=AVC msg=audit(1171435297.841:65105): avc:  denied  { link } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.841:65105): arch=c000003e syscall=86 success=yes exit=0 a0=61b640 a1=61cd10 a2=7fffbd398cb0 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171435297.841:65106): avc:  denied  { remove_name } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171435297.841:65106): avc:  denied  { unlink } for  pid=16203 comm="procmail" name="_L9D.h8q0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.841:65106): arch=c000003e syscall=87 success=yes exit=0 a0=61b640 a1=61cd10 a2=7fffbd398cb0 a3=61b640 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171435297.841:65107): avc:  denied  { append } for  pid=16203 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435297.841:65107): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16200 pid=16203 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171435501.750:65108): user pid=16269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171435501.751:65109): login pid=16269 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171435501.754:65110): user pid=16269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171435501.754:65111): user pid=16269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171435525.952:65112): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171435525.952:65113): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171435525.961:65114): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171435525.961:65115): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1171435581.238:65116): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171435581.238:65117): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171435581.249:65118): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171435581.249:65119): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1171435608.155:65120): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171435608.155:65121): user pid=16353 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1171435720.702:65122): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435720.702:65122): arch=c000003e syscall=2 success=yes exit=12 a0=37433c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435720.702:65123): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435720.702:65123): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435720.702:65123):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171435720.709:65124): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435720.709:65124): arch=c000003e syscall=2 success=yes exit=9 a0=33f3a00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435721.457:65125): avc:  denied  { search } for  pid=16605 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171435721.457:65125): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435721.457:65126): avc:  denied  { getattr } for  pid=16605 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.457:65126): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff8d4f54a0 a2=7fff8d4f54a0 a3=6c6280 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435721.457:65126):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171435721.457:65127): avc:  denied  { read } for  pid=16605 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.457:65127): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435721.458:65128): avc:  denied  { search } for  pid=16605 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435721.458:65128): avc:  denied  { write } for  pid=16605 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435721.458:65128): avc:  denied  { add_name } for  pid=16605 comm="pyzor" name="3N_xk8" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435721.458:65128): avc:  denied  { create } for  pid=16605 comm="pyzor" name="3N_xk8" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.458:65128): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435721.458:65129): avc:  denied  { getattr } for  pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.458:65129): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff8d4f3da0 a2=7fff8d4f3da0 a3=2 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435721.458:65129):  path="/tmp/3N_xk8"
>type=AVC msg=audit(1171435721.458:65130): avc:  denied  { write } for  pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.458:65130): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d88f4 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435721.458:65130):  path="/tmp/3N_xk8"
>type=AVC msg=audit(1171435721.458:65131): avc:  denied  { remove_name } for  pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171435721.458:65131): avc:  denied  { unlink } for  pid=16605 comm="pyzor" name="3N_xk8" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.458:65131): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171435721.461:65132): avc:  denied  { read } for  pid=16605 comm="pyzor" name="tmpzz1Mqn" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435721.461:65132): arch=c000003e syscall=0 success=yes exit=994 a0=4 a1=2aaaaf34d000 a2=1000 a3=ad items=0 ppid=29238 pid=16605 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435721.461:65132):  path=2F746D702F746D707A7A314D716E202864656C6574656429
>type=AVC msg=audit(1171435726.419:65133): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171435726.419:65133): arch=c000003e syscall=62 success=yes exit=0 a0=40dd a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435726.596:65134): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435726.596:65134): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171435726.596:65134):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171435726.597:65135): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435726.597:65135): arch=c000003e syscall=86 success=yes exit=0 a0=2fd3e20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435726.597:65136): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435726.597:65136): arch=c000003e syscall=87 success=yes exit=0 a0=2fd3e20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171435726.598:65137): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171435726.598:65137): arch=c000003e syscall=2 success=yes exit=9 a0=3029ea0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171435801.101:65138): user pid=16612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171435801.101:65139): login pid=16612 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171435801.104:65140): user pid=16613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171435801.104:65141): login pid=16613 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171435801.106:65142): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171435801.106:65143): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171435801.109:65144): user pid=16613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171435801.109:65145): user pid=16613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171435801.140:65146): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171435801.140:65147): user pid=16612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171435923.903:65148): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171435923.904:65149): user pid=16282 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171436101.441:65150): user pid=16798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171436101.442:65151): login pid=16798 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171436101.445:65152): user pid=16798 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171436101.445:65153): user pid=16798 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171436110.994:65154): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436110.994:65154): arch=c000003e syscall=2 success=yes exit=12 a0=3221ee0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436110.994:65155): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436110.994:65155): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436110.994:65155):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171436111.000:65156): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.000:65156): arch=c000003e syscall=2 success=yes exit=9 a0=3257340 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436111.626:65157): avc:  denied  { search } for  pid=16817 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171436111.626:65157): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436111.626:65158): avc:  denied  { getattr } for  pid=16817 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.626:65158): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb749c440 a2=7fffb749c440 a3=6c6280 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436111.626:65158):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171436111.626:65159): avc:  denied  { read } for  pid=16817 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.626:65159): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436111.627:65160): avc:  denied  { search } for  pid=16817 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436111.627:65160): avc:  denied  { write } for  pid=16817 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436111.627:65160): avc:  denied  { add_name } for  pid=16817 comm="pyzor" name="CickoC" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436111.627:65160): avc:  denied  { create } for  pid=16817 comm="pyzor" name="CickoC" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.627:65160): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436111.627:65161): avc:  denied  { getattr } for  pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.627:65161): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb749a930 a2=7fffb749a930 a3=3 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436111.627:65161):  path="/tmp/CickoC"
>type=AVC msg=audit(1171436111.627:65162): avc:  denied  { write } for  pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.627:65162): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436111.627:65162):  path="/tmp/CickoC"
>type=AVC msg=audit(1171436111.627:65163): avc:  denied  { remove_name } for  pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436111.627:65163): avc:  denied  { unlink } for  pid=16817 comm="pyzor" name="CickoC" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.627:65163): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436111.628:65164): avc:  denied  { read } for  pid=16817 comm="pyzor" name="tmpkxfVDu" dev=dm-0 ino=30703649 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436111.628:65164): arch=c000003e syscall=0 success=yes exit=768 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=16817 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436111.628:65164):  path=2F746D702F746D706B7866564475202864656C6574656429
>type=AVC msg=audit(1171436116.589:65165): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171436116.589:65165): arch=c000003e syscall=62 success=yes exit=0 a0=41b1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436117.085:65166): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.085:65166): arch=c000003e syscall=86 success=yes exit=0 a0=3212ca0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436117.086:65167): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634194 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.086:65167): arch=c000003e syscall=87 success=yes exit=0 a0=3212ca0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436117.087:65168): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.087:65168): arch=c000003e syscall=2 success=yes exit=9 a0=312f4c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436117.131:65169): avc:  denied  { write } for  pid=16813 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436117.131:65169): avc:  denied  { add_name } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436117.131:65169): avc:  denied  { create } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.131:65169): arch=c000003e syscall=2 success=yes exit=6 a0=61c940 a1=c1 a2=124 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436117.132:65170): avc:  denied  { write } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.132:65170): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436117.132:65170):  path="/home/dhighley/_tGE.VJr0FB.douglas"
>type=AVC msg=audit(1171436117.133:65171): avc:  denied  { getattr } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.133:65171): arch=c000003e syscall=4 success=yes exit=0 a0=61c940 a1=7fff24f5a950 a2=7fff24f5a950 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436117.133:65171):  path="/home/dhighley/_tGE.VJr0FB.douglas"
>type=AVC msg=audit(1171436117.133:65172): avc:  denied  { link } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.133:65172): arch=c000003e syscall=86 success=yes exit=0 a0=61c940 a1=61b520 a2=7fff24f5a870 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436117.133:65173): avc:  denied  { remove_name } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436117.133:65173): avc:  denied  { unlink } for  pid=16813 comm="procmail" name="_tGE.VJr0FB.douglas" dev=dm-0 ino=12485719 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.133:65173): arch=c000003e syscall=87 success=yes exit=0 a0=61c940 a1=61b520 a2=7fff24f5a870 a3=61c940 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436117.133:65174): avc:  denied  { append } for  pid=16813 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436117.133:65174): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16810 pid=16813 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_END msg=audit(1171436206.262:65175): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171436206.263:65176): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1171436400.898:65177): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436400.898:65177): arch=c000003e syscall=2 success=yes exit=12 a0=333ea20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436400.899:65178): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436400.899:65178): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436400.899:65178):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171436400.919:65179): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436400.919:65179): arch=c000003e syscall=2 success=yes exit=9 a0=371fcf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171436401.799:65180): user pid=16905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171436401.799:65181): login pid=16905 uid=0 old auid=4294967295 new auid=0
>type=AVC msg=audit(1171436401.804:65182): avc:  denied  { search } for  pid=16904 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171436401.804:65182): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436401.805:65183): avc:  denied  { getattr } for  pid=16904 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.805:65183): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff46a67a10 a2=7fff46a67a10 a3=6c6280 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436401.805:65183):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171436401.805:65184): avc:  denied  { read } for  pid=16904 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.805:65184): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436401.806:65185): avc:  denied  { search } for  pid=16904 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436401.806:65185): avc:  denied  { write } for  pid=16904 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436401.806:65185): avc:  denied  { add_name } for  pid=16904 comm="pyzor" name="4XpJpT" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436401.806:65185): avc:  denied  { create } for  pid=16904 comm="pyzor" name="4XpJpT" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.806:65185): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436401.806:65186): avc:  denied  { getattr } for  pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.806:65186): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff46a66310 a2=7fff46a66310 a3=2 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436401.806:65186):  path="/tmp/4XpJpT"
>type=AVC msg=audit(1171436401.806:65187): avc:  denied  { write } for  pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.806:65187): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436401.806:65187):  path="/tmp/4XpJpT"
>type=AVC msg=audit(1171436401.806:65188): avc:  denied  { remove_name } for  pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171436401.806:65188): avc:  denied  { unlink } for  pid=16904 comm="pyzor" name="4XpJpT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.806:65188): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171436401.838:65189): user pid=16906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171436401.838:65190): login pid=16906 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171436401.839:65191): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171436401.839:65192): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171436401.848:65193): avc:  denied  { read } for  pid=16904 comm="pyzor" name="tmpOpOYtF" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.848:65193): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2761 items=0 ppid=29238 pid=16904 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436401.848:65193):  path=2F746D702F746D704F704F597446202864656C6574656429
>type=USER_START msg=audit(1171436401.850:65194): user pid=16906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171436401.850:65195): user pid=16906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171436401.907:65196): avc:  denied  { append } for  pid=31334 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436401.907:65196): arch=c000003e syscall=2 success=yes exit=9 a0=31c68b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=31334 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171436401.924:65197): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171436401.925:65198): user pid=16905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171436402.485:65199): avc:  denied  { getattr } for  pid=16918 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436402.485:65199): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff81dbbd60 a2=7fff81dbbd60 a3=6c6280 items=0 ppid=31334 pid=16918 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436402.485:65199):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171436402.486:65200): avc:  denied  { read } for  pid=16918 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436402.486:65200): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=31334 pid=16918 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171436406.759:65201): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171436406.759:65201): arch=c000003e syscall=62 success=yes exit=0 a0=4208 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436407.123:65202): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.123:65202): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436407.123:65202):  path="/home/phighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171436407.124:65203): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.124:65203): arch=c000003e syscall=86 success=yes exit=0 a0=33cf0d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436407.124:65204): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=12484621 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.124:65204): arch=c000003e syscall=87 success=yes exit=0 a0=33cf0d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436407.125:65205): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.125:65205): arch=c000003e syscall=2 success=yes exit=9 a0=3721650 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171436407.219:65206): avc:  denied  { write } for  pid=16893 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436407.219:65206): avc:  denied  { add_name } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436407.219:65206): avc:  denied  { create } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.219:65206): arch=c000003e syscall=2 success=yes exit=6 a0=61b630 a1=c1 a2=124 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436407.219:65207): avc:  denied  { write } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.219:65207): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436407.219:65207):  path="/home/phighley/_9HE.3Nr0FB.douglas"
>type=AVC msg=audit(1171436407.220:65208): avc:  denied  { getattr } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.220:65208): arch=c000003e syscall=4 success=yes exit=0 a0=61b630 a1=7fff7828dc60 a2=7fff7828dc60 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436407.220:65208):  path="/home/phighley/_9HE.3Nr0FB.douglas"
>type=AVC msg=audit(1171436407.220:65209): avc:  denied  { link } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.220:65209): arch=c000003e syscall=86 success=yes exit=0 a0=61b630 a1=624040 a2=7fff7828db80 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436407.220:65210): avc:  denied  { remove_name } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171436407.220:65210): avc:  denied  { unlink } for  pid=16893 comm="procmail" name="_9HE.3Nr0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.220:65210): arch=c000003e syscall=87 success=yes exit=0 a0=61b630 a1=624040 a2=7fff7828db80 a3=61b630 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436407.220:65211): avc:  denied  { append } for  pid=16893 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.220:65211): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436407.220:65212): avc:  denied  { lock } for  pid=16893 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.220:65212): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=16888 pid=16893 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171436407.220:65212):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171436407.578:65213): avc:  denied  { append } for  pid=16900 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436407.578:65213): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=16897 pid=16900 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171436451.468:65214): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171436451.468:65214): arch=c000003e syscall=2 success=yes exit=12 a0=35be270 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171436461.195:65215): user pid=16932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171436461.195:65216): login pid=16932 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171436461.198:65217): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171436461.198:65218): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171436462.089:65219): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171436462.089:65220): user pid=16932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171436701.097:65221): user pid=16970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171436701.097:65222): login pid=16970 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171436701.101:65223): user pid=16970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171436701.101:65224): user pid=16970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171437001.424:65225): user pid=17007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437001.425:65226): login pid=17007 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171437001.427:65227): user pid=17008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437001.427:65229): login pid=17008 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171437001.427:65228): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437001.427:65230): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171437001.437:65231): user pid=17008 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437001.437:65232): user pid=17008 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171437001.448:65233): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171437001.448:65234): user pid=17007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171437191.100:65235): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171437191.100:65236): user pid=14727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171437301.106:65237): user pid=17045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437301.106:65238): login pid=17045 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171437301.110:65239): user pid=17045 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437301.111:65240): user pid=17045 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171437601.450:65241): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437601.451:65242): login pid=17079 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171437601.453:65243): user pid=17080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437601.453:65244): login pid=17080 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171437601.454:65245): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437601.455:65246): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171437601.460:65247): user pid=17080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437601.460:65248): user pid=17080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171437601.473:65249): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171437601.473:65250): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171437901.786:65251): user pid=17114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171437901.786:65252): login pid=17114 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171437901.789:65253): user pid=17114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171437901.789:65254): user pid=17114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171438201.113:65255): user pid=17147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171438201.113:65256): login pid=17147 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171438201.115:65257): user pid=17148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171438201.115:65258): login pid=17148 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171438201.116:65259): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171438201.116:65260): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171438201.127:65261): user pid=17148 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171438201.127:65262): user pid=17148 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171438201.133:65263): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171438201.134:65264): user pid=17147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171438501.459:65265): user pid=17183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171438501.460:65266): login pid=17183 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171438501.462:65267): user pid=17183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171438501.463:65268): user pid=17183 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171438801.783:65269): user pid=17217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171438801.783:65270): login pid=17217 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171438801.785:65271): user pid=17218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171438801.786:65272): login pid=17218 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171438801.788:65273): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171438801.788:65274): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171438801.796:65275): user pid=17218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171438801.797:65276): user pid=17218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171438801.805:65277): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171438801.806:65278): user pid=17217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171438981.404:65279): avc:  denied  { search } for  pid=17257 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171438981.404:65279): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171438981.405:65280): avc:  denied  { search } for  pid=17257 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171438981.405:65280): avc:  denied  { write } for  pid=17257 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171438981.405:65280): avc:  denied  { add_name } for  pid=17257 comm="pyzor" name="C-TtUM" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171438981.405:65280): avc:  denied  { create } for  pid=17257 comm="pyzor" name="C-TtUM" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171438981.405:65280): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171438981.406:65281): avc:  denied  { getattr } for  pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171438981.406:65281): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff7736bc10 a2=7fff7736bc10 a3=2 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171438981.406:65281):  path="/tmp/C-TtUM"
>type=AVC msg=audit(1171438981.406:65282): avc:  denied  { write } for  pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171438981.406:65282): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171438981.406:65282):  path="/tmp/C-TtUM"
>type=AVC msg=audit(1171438981.406:65283): avc:  denied  { remove_name } for  pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171438981.406:65283): avc:  denied  { unlink } for  pid=17257 comm="pyzor" name="C-TtUM" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171438981.406:65283): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171438981.412:65284): avc:  denied  { read } for  pid=17257 comm="pyzor" name="tmpZhHPpc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171438981.412:65284): arch=c000003e syscall=0 success=yes exit=1483 a0=4 a1=2aaaaf34d000 a2=1000 a3=fb items=0 ppid=29238 pid=17257 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171438981.412:65284):  path=2F746D702F746D705A6848507063202864656C6574656429
>type=USER_ACCT msg=audit(1171439101.128:65285): user pid=17272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171439101.128:65286): login pid=17272 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171439101.131:65287): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171439101.132:65288): user pid=17272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171439401.460:65289): user pid=17311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171439401.460:65290): login pid=17311 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171439401.463:65291): user pid=17312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171439401.463:65292): login pid=17312 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171439401.465:65293): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171439401.465:65294): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171439401.467:65295): user pid=17312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171439401.467:65296): user pid=17312 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171439401.487:65297): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171439401.487:65298): user pid=17311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171439498.728:65299): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439498.728:65299): arch=c000003e syscall=2 success=yes exit=12 a0=35e7260 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439498.728:65300): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439498.728:65300): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171439498.728:65300):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171439498.736:65301): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439498.736:65301): arch=c000003e syscall=2 success=yes exit=9 a0=32b8be0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439499.397:65302): avc:  denied  { getattr } for  pid=17345 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439499.397:65302): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2d50f4b0 a2=7fff2d50f4b0 a3=6c6280 items=0 ppid=29238 pid=17345 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171439499.397:65302):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171439499.398:65303): avc:  denied  { read } for  pid=17345 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439499.398:65303): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17345 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171439504.359:65304): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171439504.359:65304): arch=c000003e syscall=62 success=yes exit=0 a0=43c1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439504.372:65305): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.372:65305): arch=c000003e syscall=86 success=yes exit=0 a0=347d9d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439504.373:65306): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.373:65306): arch=c000003e syscall=87 success=yes exit=0 a0=347d9d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439504.373:65307): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.373:65307): arch=c000003e syscall=2 success=yes exit=9 a0=35772a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171439504.389:65308): avc:  denied  { write } for  pid=17341 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171439504.389:65308): avc:  denied  { add_name } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171439504.389:65308): avc:  denied  { create } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.389:65308): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171439504.389:65309): avc:  denied  { write } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.389:65309): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171439504.389:65309):  path="/home/dhighley/_9OE.Q-r0FB.douglas"
>type=AVC msg=audit(1171439504.389:65310): avc:  denied  { getattr } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.389:65310): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff70555f50 a2=7fff70555f50 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171439504.389:65310):  path="/home/dhighley/_9OE.Q-r0FB.douglas"
>type=AVC msg=audit(1171439504.390:65311): avc:  denied  { link } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.390:65311): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff70555e70 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171439504.390:65312): avc:  denied  { remove_name } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171439504.390:65312): avc:  denied  { unlink } for  pid=17341 comm="procmail" name="_9OE.Q-r0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.390:65312): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff70555e70 a3=61a500 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171439504.390:65313): avc:  denied  { append } for  pid=17341 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171439504.390:65313): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=17336 pid=17341 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171439581.790:65314): user pid=17357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171439581.790:65315): login pid=17357 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171439581.795:65316): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171439581.795:65317): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171439581.996:65318): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171439581.996:65319): user pid=17357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171439702.003:65320): user pid=17375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171439702.003:65321): login pid=17375 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171439702.006:65322): user pid=17375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171439702.006:65323): user pid=17375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171440001.336:65324): user pid=17411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440001.336:65325): login pid=17411 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171440001.337:65326): user pid=17413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440001.337:65327): login pid=17413 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171440001.338:65328): user pid=17412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440001.338:65329): login pid=17412 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171440001.342:65330): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440001.342:65331): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171440001.346:65332): user pid=17413 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440001.346:65333): user pid=17413 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171440001.348:65334): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440001.348:65335): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171440001.372:65336): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171440001.373:65337): user pid=17411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171440061.677:65338): user pid=17432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440061.677:65339): login pid=17432 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171440061.681:65340): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440061.681:65341): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171440062.565:65342): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171440062.566:65343): user pid=17432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171440301.575:65344): user pid=17484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440301.575:65345): login pid=17484 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171440301.577:65346): user pid=17484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440301.577:65347): user pid=17484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171440601.903:65348): user pid=17522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440601.904:65349): login pid=17522 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171440601.906:65350): user pid=17523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440601.906:65351): login pid=17523 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171440601.908:65352): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440601.908:65353): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171440601.912:65354): user pid=17523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440601.912:65355): user pid=17523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171440601.927:65356): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171440601.927:65357): user pid=17522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171440901.254:65358): user pid=17558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171440901.254:65359): login pid=17558 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171440901.258:65360): user pid=17558 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171440901.258:65361): user pid=17558 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171441201.577:65362): user pid=17593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171441201.577:65363): login pid=17593 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171441201.578:65364): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171441201.578:65365): login pid=17594 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171441201.583:65366): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171441201.583:65367): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171441201.588:65368): user pid=17594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171441201.588:65369): user pid=17594 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171441201.603:65370): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171441201.603:65371): user pid=17593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171441326.719:65372): avc:  denied  { search } for  pid=17624 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171441326.719:65372): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441326.720:65373): avc:  denied  { create } for  pid=17624 comm="pyzor" name="fJVANO" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441326.720:65373): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441326.720:65374): avc:  denied  { getattr } for  pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441326.720:65374): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff366f2e90 a2=7fff366f2e90 a3=2 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441326.720:65374):  path="/tmp/fJVANO"
>type=AVC msg=audit(1171441326.720:65375): avc:  denied  { write } for  pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441326.720:65375): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441326.720:65375):  path="/tmp/fJVANO"
>type=AVC msg=audit(1171441326.720:65376): avc:  denied  { unlink } for  pid=17624 comm="pyzor" name="fJVANO" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441326.720:65376): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441326.721:65377): avc:  denied  { read } for  pid=17624 comm="pyzor" name="tmpfBsBLT" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441326.721:65377): arch=c000003e syscall=0 success=yes exit=9 a0=4 a1=6db010 a2=2000 a3=3 items=0 ppid=29238 pid=17624 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441326.721:65377):  path=2F746D702F746D70664273424C54202864656C6574656429
>type=AVC msg=audit(1171441331.890:65378): avc:  denied  { append } for  pid=17620 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441331.890:65378): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=17615 pid=17620 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171441501.916:65379): user pid=17643 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171441501.916:65380): login pid=17643 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171441501.920:65381): user pid=17643 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171441501.920:65382): user pid=17643 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171441801.258:65383): user pid=17681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171441801.258:65384): login pid=17681 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171441801.258:65385): user pid=17680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171441801.258:65386): login pid=17680 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171441801.263:65387): user pid=17681 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171441801.263:65388): user pid=17681 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171441801.269:65389): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171441801.269:65390): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171441801.292:65391): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171441801.293:65392): user pid=17680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171441849.016:65393): avc:  denied  { getattr } for  pid=17704 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441849.016:65393): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9d4b6460 a2=7fff9d4b6460 a3=6c6280 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441849.016:65393):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171441849.016:65394): avc:  denied  { read } for  pid=17704 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441849.016:65394): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441849.017:65395): avc:  denied  { search } for  pid=17704 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171441849.017:65395): avc:  denied  { write } for  pid=17704 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171441849.017:65395): avc:  denied  { add_name } for  pid=17704 comm="pyzor" name="-cUmT1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171441849.017:65395): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441849.017:65396): avc:  denied  { remove_name } for  pid=17704 comm="pyzor" name="-cUmT1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171441849.017:65396): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=17704 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171441853.978:65397): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171441853.978:65397): arch=c000003e syscall=62 success=yes exit=0 a0=4528 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171441854.277:65398): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.277:65398): arch=c000003e syscall=2 success=yes exit=9 a0=3581440 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171441854.335:65399): avc:  denied  { write } for  pid=17700 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171441854.335:65399): avc:  denied  { add_name } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171441854.335:65399): avc:  denied  { create } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.335:65399): arch=c000003e syscall=2 success=yes exit=6 a0=61ca90 a1=c1 a2=124 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171441854.336:65400): avc:  denied  { write } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.336:65400): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441854.336:65400):  path="/home/dhighley/_kUE.-is0FB.douglas"
>type=AVC msg=audit(1171441854.336:65401): avc:  denied  { getattr } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.336:65401): arch=c000003e syscall=4 success=yes exit=0 a0=61ca90 a1=7fffb3898290 a2=7fffb3898290 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171441854.336:65401):  path="/home/dhighley/_kUE.-is0FB.douglas"
>type=AVC msg=audit(1171441854.336:65402): avc:  denied  { link } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.336:65402): arch=c000003e syscall=86 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb38981b0 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171441854.336:65403): avc:  denied  { remove_name } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171441854.336:65403): avc:  denied  { unlink } for  pid=17700 comm="procmail" name="_kUE.-is0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171441854.336:65403): arch=c000003e syscall=87 success=yes exit=0 a0=61ca90 a1=61b520 a2=7fffb38981b0 a3=61ca90 items=0 ppid=17695 pid=17700 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171442101.596:65404): user pid=17727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171442101.597:65405): login pid=17727 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171442101.600:65406): user pid=17727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171442101.600:65407): user pid=17727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171442401.920:65408): user pid=17767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171442401.921:65409): login pid=17767 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171442401.921:65410): user pid=17766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171442401.921:65411): login pid=17766 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171442401.925:65412): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171442401.926:65413): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171442401.926:65414): user pid=17767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171442401.927:65415): user pid=17767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171442401.948:65416): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171442401.948:65417): user pid=17766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171442701.256:65418): user pid=17805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171442701.256:65419): login pid=17805 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171442701.259:65420): user pid=17805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171442701.259:65421): user pid=17805 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171442866.439:65422): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171442866.439:65422): arch=c000003e syscall=2 success=yes exit=12 a0=34a1a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171442866.439:65423): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171442866.439:65423): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171442866.439:65423):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171442866.447:65424): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171442866.447:65424): arch=c000003e syscall=2 success=yes exit=9 a0=2fc41f0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171442872.096:65425): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171442872.096:65425): arch=c000003e syscall=86 success=yes exit=0 a0=3311340 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171442872.097:65426): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171442872.097:65426): arch=c000003e syscall=87 success=yes exit=0 a0=3311340 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171443001.579:65427): user pid=17863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443001.579:65428): login pid=17863 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171443001.581:65429): user pid=17864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443001.582:65430): login pid=17864 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171443001.583:65431): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443001.584:65432): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171443001.595:65433): user pid=17864 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443001.595:65434): user pid=17864 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171443001.604:65435): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171443001.605:65436): user pid=17863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171443301.930:65437): user pid=17905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443301.930:65438): login pid=17905 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171443301.934:65439): user pid=17905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443301.934:65440): user pid=17905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171443393.719:65441): avc:  denied  { search } for  pid=17934 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171443393.719:65441): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=17934 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171443601.267:65442): user pid=17953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443601.268:65443): login pid=17953 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171443601.269:65444): user pid=17954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443601.270:65445): login pid=17954 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171443601.270:65446): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443601.270:65447): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171443601.274:65448): user pid=17954 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443601.274:65449): user pid=17954 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171443601.293:65450): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171443601.293:65451): user pid=17953 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171443661.609:65452): user pid=17973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443661.609:65453): login pid=17973 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171443661.612:65454): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443661.612:65455): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171443662.520:65456): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171443662.520:65457): user pid=17973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171443901.531:65458): user pid=18012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171443901.531:65459): login pid=18012 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171443901.536:65460): user pid=18012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171443901.536:65461): user pid=18012 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171443948.327:65462): avc:  denied  { search } for  pid=18037 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171443948.327:65462): avc:  denied  { write } for  pid=18037 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171443948.327:65462): avc:  denied  { add_name } for  pid=18037 comm="pyzor" name="6Az_oS" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171443948.327:65462): avc:  denied  { create } for  pid=18037 comm="pyzor" name="6Az_oS" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443948.327:65462): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171443948.328:65463): avc:  denied  { getattr } for  pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443948.328:65463): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff41fb5dd0 a2=7fff41fb5dd0 a3=3 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171443948.328:65463):  path="/tmp/6Az_oS"
>type=AVC msg=audit(1171443948.328:65464): avc:  denied  { write } for  pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443948.328:65464): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171443948.328:65464):  path="/tmp/6Az_oS"
>type=AVC msg=audit(1171443948.328:65465): avc:  denied  { remove_name } for  pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171443948.328:65465): avc:  denied  { unlink } for  pid=18037 comm="pyzor" name="6Az_oS" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443948.328:65465): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae710 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171443948.330:65466): avc:  denied  { read } for  pid=18037 comm="pyzor" name="tmpZh0Wzc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443948.330:65466): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=18037 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171443948.330:65466):  path=2F746D702F746D705A6830577A63202864656C6574656429
>type=AVC msg=audit(1171443953.325:65467): avc:  denied  { append } for  pid=18032 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171443953.325:65467): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18027 pid=18032 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171444201.865:65468): user pid=18072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171444201.866:65469): login pid=18072 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171444201.867:65470): user pid=18073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171444201.867:65471): login pid=18073 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171444201.872:65472): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171444201.872:65473): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171444201.875:65474): user pid=18073 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171444201.875:65475): user pid=18073 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171444201.892:65476): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171444201.892:65477): user pid=18072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171444501.212:65478): user pid=18112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171444501.213:65479): login pid=18112 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171444501.215:65480): user pid=18112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171444501.215:65481): user pid=18112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171444801.535:65482): user pid=18149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171444801.536:65483): login pid=18149 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171444801.537:65484): user pid=18150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171444801.537:65485): login pid=18150 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171444801.539:65486): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171444801.539:65487): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171444801.549:65488): user pid=18150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171444801.549:65489): user pid=18150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171444801.557:65490): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171444801.557:65491): user pid=18149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171445101.879:65492): user pid=18186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171445101.880:65493): login pid=18186 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171445101.882:65494): user pid=18186 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171445101.882:65495): user pid=18186 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171445328.921:65496): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445328.921:65496): arch=c000003e syscall=2 success=yes exit=9 a0=3675670 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171445329.783:65497): avc:  denied  { getattr } for  pid=18224 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445329.783:65497): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff68b28ad0 a2=7fff68b28ad0 a3=6c6280 items=0 ppid=29238 pid=18224 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171445329.783:65497):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171445329.783:65498): avc:  denied  { read } for  pid=18224 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445329.783:65498): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18224 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171445334.744:65499): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171445334.744:65499): arch=c000003e syscall=62 success=yes exit=0 a0=4730 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171445336.126:65500): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.126:65500): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171445336.126:65500):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171445336.126:65501): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.126:65501): arch=c000003e syscall=86 success=yes exit=0 a0=37c77c0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171445336.126:65502): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.126:65502): arch=c000003e syscall=87 success=yes exit=0 a0=37c77c0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171445336.127:65503): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.127:65503): arch=c000003e syscall=2 success=yes exit=9 a0=32ff6c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171445336.139:65504): avc:  denied  { write } for  pid=18219 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171445336.139:65504): avc:  denied  { add_name } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171445336.139:65504): avc:  denied  { create } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.139:65504): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171445336.140:65505): avc:  denied  { write } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.140:65505): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171445336.140:65505):  path="/home/dhighley/_rcE.YZt0FB.douglas"
>type=AVC msg=audit(1171445336.140:65506): avc:  denied  { getattr } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.140:65506): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff36f38d10 a2=7fff36f38d10 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171445336.140:65506):  path="/home/dhighley/_rcE.YZt0FB.douglas"
>type=AVC msg=audit(1171445336.140:65507): avc:  denied  { link } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.140:65507): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=62d580 a2=7fff36f38c30 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171445336.140:65508): avc:  denied  { remove_name } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171445336.140:65508): avc:  denied  { unlink } for  pid=18219 comm="procmail" name="_rcE.YZt0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445336.140:65508): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=62d580 a2=7fff36f38c30 a3=61b650 items=0 ppid=18214 pid=18219 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171445401.206:65509): user pid=18231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171445401.206:65510): login pid=18231 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171445401.208:65511): user pid=18230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171445401.208:65512): login pid=18230 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171445401.210:65513): user pid=18231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171445401.210:65514): user pid=18231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171445401.216:65515): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171445401.217:65516): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171445401.239:65517): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171445401.239:65518): user pid=18230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171445484.069:65519): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171445484.069:65519): arch=c000003e syscall=2 success=yes exit=12 a0=35759d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171445701.534:65520): user pid=18275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171445701.534:65521): login pid=18275 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171445701.537:65522): user pid=18275 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171445701.537:65523): user pid=18275 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171446001.860:65524): user pid=18332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446001.860:65525): login pid=18332 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171446001.862:65526): user pid=18333 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446001.862:65527): login pid=18333 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171446001.864:65528): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171446001.864:65529): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171446001.869:65530): user pid=18333 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171446001.869:65531): user pid=18333 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171446001.886:65532): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171446001.886:65533): user pid=18332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171446301.211:65534): user pid=18375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446301.211:65535): login pid=18375 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171446301.215:65536): user pid=18375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171446301.215:65537): user pid=18375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171446465.897:65538): avc:  denied  { create } for  pid=18410 comm="pyzor" name="WFAuAc" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446465.897:65538): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171446465.897:65539): avc:  denied  { getattr } for  pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446465.897:65539): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffadc10200 a2=7fffadc10200 a3=3 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171446465.897:65539):  path="/tmp/WFAuAc"
>type=AVC msg=audit(1171446465.897:65540): avc:  denied  { write } for  pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446465.897:65540): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171446465.897:65540):  path="/tmp/WFAuAc"
>type=AVC msg=audit(1171446465.898:65541): avc:  denied  { unlink } for  pid=18410 comm="pyzor" name="WFAuAc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446465.898:65541): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171446465.899:65542): avc:  denied  { read } for  pid=18410 comm="pyzor" name="tmpJEBvgV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446465.899:65542): arch=c000003e syscall=0 success=yes exit=477 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d88f4 items=0 ppid=29238 pid=18410 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171446465.899:65542):  path=2F746D702F746D704A4542766756202864656C6574656429
>type=USER_ACCT msg=audit(1171446601.534:65543): user pid=18425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446601.534:65544): login pid=18425 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171446601.537:65545): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171446601.537:65546): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446601.537:65547): login pid=18426 uid=0 old auid=4294967295 new auid=111
>type=CRED_ACQ msg=audit(1171446601.537:65548): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171446601.548:65549): user pid=18426 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171446601.548:65550): user pid=18426 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171446601.556:65551): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171446601.557:65552): user pid=18425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171446857.005:65553): avc:  denied  { append } for  pid=18468 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171446857.005:65553): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=18463 pid=18468 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171446901.870:65554): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171446901.870:65555): login pid=18477 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171446901.873:65556): user pid=18477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171446901.873:65557): user pid=18477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171447201.215:65558): user pid=18514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447201.216:65559): login pid=18514 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171447201.217:65560): user pid=18515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447201.218:65561): login pid=18515 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171447201.218:65562): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447201.218:65563): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171447201.231:65564): user pid=18515 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447201.231:65565): user pid=18515 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171447201.237:65566): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171447201.237:65567): user pid=18514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171447261.555:65568): user pid=18530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447261.556:65569): login pid=18530 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171447261.559:65570): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447261.559:65571): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171447262.474:65572): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171447262.474:65573): user pid=18530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171447501.482:65574): user pid=18569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447501.482:65575): login pid=18569 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171447501.486:65576): user pid=18569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447501.486:65577): user pid=18569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171447801.804:65578): user pid=18604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447801.804:65579): login pid=18604 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171447801.807:65580): user pid=18605 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171447801.807:65581): login pid=18605 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171447801.810:65582): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447801.810:65583): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171447801.812:65584): user pid=18605 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171447801.812:65585): user pid=18605 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171447801.839:65586): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171447801.839:65587): user pid=18604 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171447989.958:65588): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171447989.959:65589): user pid=17412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171448101.963:65590): user pid=18649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171448101.964:65591): login pid=18649 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171448101.967:65592): user pid=18649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171448101.967:65593): user pid=18649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171448198.327:65594): avc:  denied  { search } for  pid=18675 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171448198.327:65594): avc:  denied  { write } for  pid=18675 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171448198.327:65594): avc:  denied  { add_name } for  pid=18675 comm="pyzor" name="AFjTw8" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171448198.327:65594): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=18675 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171448198.327:65595): avc:  denied  { remove_name } for  pid=18675 comm="pyzor" name="AFjTw8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171448198.327:65595): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18675 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171448203.288:65596): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171448203.288:65596): arch=c000003e syscall=62 success=yes exit=0 a0=48f3 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171448203.313:65597): avc:  denied  { write } for  pid=18671 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171448203.313:65597): avc:  denied  { add_name } for  pid=18671 comm="procmail" name="_vjE.LGu0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171448203.313:65597): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=18666 pid=18671 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171448203.314:65598): avc:  denied  { remove_name } for  pid=18671 comm="procmail" name="_vjE.LGu0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171448203.314:65598): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d600 a2=7fff1662cf50 a3=61b650 items=0 ppid=18666 pid=18671 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171448401.288:65599): user pid=18692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171448401.288:65600): login pid=18692 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171448401.290:65601): user pid=18693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171448401.290:65602): login pid=18693 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171448401.292:65603): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171448401.292:65604): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171448401.302:65605): user pid=18693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171448401.302:65606): user pid=18693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171448401.318:65607): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171448401.318:65608): user pid=18692 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171448701.625:65609): user pid=18730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171448701.626:65610): login pid=18730 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171448701.628:65611): user pid=18730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171448701.628:65612): user pid=18730 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171449001.949:65613): user pid=18766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449001.950:65614): login pid=18766 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171449001.952:65615): user pid=18767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449001.952:65616): login pid=18767 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171449001.956:65617): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449001.956:65618): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171449001.961:65619): user pid=18767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449001.961:65620): user pid=18767 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171449001.979:65621): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171449001.980:65622): user pid=18766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171449301.291:65623): user pid=18803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449301.291:65624): login pid=18803 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171449301.295:65625): user pid=18803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449301.295:65626): user pid=18803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171449330.899:65627): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449330.899:65627): arch=c000003e syscall=2 success=yes exit=12 a0=20ec470 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171449330.899:65628): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449330.899:65628): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171449330.899:65628):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171449330.907:65629): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449330.907:65629): arch=c000003e syscall=2 success=yes exit=9 a0=377d840 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171449331.637:65630): avc:  denied  { getattr } for  pid=18825 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449331.637:65630): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb85e0580 a2=7fffb85e0580 a3=6c6280 items=0 ppid=29238 pid=18825 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171449331.637:65630):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171449331.637:65631): avc:  denied  { read } for  pid=18825 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449331.637:65631): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18825 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171449336.612:65632): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449336.612:65632): arch=c000003e syscall=86 success=yes exit=0 a0=3250f40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171449336.612:65633): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449336.612:65633): arch=c000003e syscall=87 success=yes exit=0 a0=3250f40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171449336.613:65634): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449336.613:65634): arch=c000003e syscall=2 success=yes exit=9 a0=329be20 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171449601.623:65635): user pid=18846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449601.623:65636): login pid=18846 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171449601.624:65637): user pid=18847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449601.625:65638): login pid=18847 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171449601.626:65639): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449601.626:65640): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171449601.639:65641): user pid=18847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449601.639:65642): user pid=18847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171449601.646:65643): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171449601.647:65644): user pid=18846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171449901.974:65645): user pid=18884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171449901.974:65646): login pid=18884 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171449901.977:65647): user pid=18884 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171449901.977:65648): user pid=18884 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171449983.672:65649): avc:  denied  { search } for  pid=18911 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171449983.672:65649): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171449983.673:65650): avc:  denied  { create } for  pid=18911 comm="pyzor" name="YjiiOK" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449983.673:65650): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171449983.673:65651): avc:  denied  { getattr } for  pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449983.673:65651): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff58988230 a2=7fff58988230 a3=2 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171449983.673:65651):  path="/tmp/YjiiOK"
>type=AVC msg=audit(1171449983.673:65652): avc:  denied  { write } for  pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449983.673:65652): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171449983.673:65652):  path="/tmp/YjiiOK"
>type=AVC msg=audit(1171449983.673:65653): avc:  denied  { unlink } for  pid=18911 comm="pyzor" name="YjiiOK" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449983.673:65653): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171449983.674:65654): avc:  denied  { read } for  pid=18911 comm="pyzor" name="tmpLqwuHQ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449983.674:65654): arch=c000003e syscall=0 success=yes exit=524 a0=4 a1=2aaaaf34d000 a2=1000 a3=b1 items=0 ppid=29238 pid=18911 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171449983.674:65654):  path=2F746D702F746D704C7177754851202864656C6574656429
>type=AVC msg=audit(1171449988.660:65655): avc:  denied  { append } for  pid=18907 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171449988.660:65655): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=18902 pid=18907 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171450201.296:65656): user pid=18939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450201.297:65657): login pid=18939 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171450201.299:65658): user pid=18940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450201.299:65659): login pid=18940 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171450201.302:65660): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450201.302:65661): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171450201.304:65662): user pid=18940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450201.304:65663): user pid=18940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171450201.324:65664): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171450201.324:65665): user pid=18939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171450501.631:65666): user pid=18982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450501.632:65667): login pid=18982 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171450501.635:65668): user pid=18982 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450501.635:65669): user pid=18982 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171450801.960:65670): user pid=19020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450801.960:65671): login pid=19020 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171450801.962:65672): user pid=19019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450801.962:65673): login pid=19019 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171450801.963:65674): user pid=19021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450801.963:65675): login pid=19021 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171450801.966:65676): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450801.966:65677): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171450801.969:65678): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450801.969:65679): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171450801.977:65680): user pid=19021 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450801.977:65681): user pid=19021 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171450801.995:65682): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171450801.995:65683): user pid=19019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171450861.316:65684): user pid=19040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171450861.316:65685): login pid=19040 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171450861.320:65686): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171450861.321:65687): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171450862.232:65688): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171450862.233:65689): user pid=19040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171451101.240:65690): user pid=19082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171451101.241:65691): login pid=19082 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171451101.245:65692): user pid=19082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171451101.245:65693): user pid=19082 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171451333.235:65694): avc:  denied  { getattr } for  pid=19127 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171451333.235:65694): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff6b4d1470 a2=7fff6b4d1470 a3=6c6280 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171451333.235:65694):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171451333.236:65695): avc:  denied  { read } for  pid=19127 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171451333.236:65695): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171451333.236:65696): avc:  denied  { search } for  pid=19127 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171451333.236:65696): avc:  denied  { write } for  pid=19127 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171451333.236:65696): avc:  denied  { add_name } for  pid=19127 comm="pyzor" name="Ka9nSG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171451333.236:65696): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171451333.237:65697): avc:  denied  { remove_name } for  pid=19127 comm="pyzor" name="Ka9nSG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171451333.237:65697): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19127 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171451338.198:65698): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171451338.198:65698): arch=c000003e syscall=62 success=yes exit=0 a0=4ab7 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171451338.892:65699): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171451338.892:65699): arch=c000003e syscall=2 success=yes exit=9 a0=3239970 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171451338.902:65700): avc:  denied  { write } for  pid=19122 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171451338.902:65700): avc:  denied  { add_name } for  pid=19122 comm="procmail" name="_yqE.K3u0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171451338.902:65700): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=19117 pid=19122 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171451338.903:65701): avc:  denied  { remove_name } for  pid=19122 comm="procmail" name="_yqE.K3u0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171451338.903:65701): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61d040 a2=7fffb2646f70 a3=61b5c0 items=0 ppid=19117 pid=19122 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171451401.565:65702): user pid=19133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171451401.565:65703): login pid=19133 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171451401.567:65704): user pid=19134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171451401.568:65705): login pid=19134 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171451401.569:65706): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171451401.570:65707): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171451401.571:65708): user pid=19134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171451401.572:65709): user pid=19134 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171451401.591:65710): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171451401.592:65711): user pid=19133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171451701.906:65712): user pid=19172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171451701.906:65713): login pid=19172 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171451701.910:65714): user pid=19172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171451701.910:65715): user pid=19172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171452001.232:65716): user pid=19205 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452001.232:65717): login pid=19205 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171452001.234:65718): user pid=19206 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452001.234:65719): login pid=19206 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171452001.236:65720): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452001.236:65721): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171452001.248:65722): user pid=19206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452001.249:65723): user pid=19206 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171452001.255:65724): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171452001.256:65725): user pid=19205 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171452160.370:65726): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.370:65726): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171452160.370:65726):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.29238"
>type=AVC msg=audit(1171452160.371:65727): avc:  denied  { link } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.371:65727): arch=c000003e syscall=86 success=yes exit=0 a0=32bdc20 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171452160.371:65728): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.371:65728): arch=c000003e syscall=87 success=yes exit=0 a0=32bdc20 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171452160.373:65729): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.373:65729): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171452160.373:65730): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.373:65730): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171452160.705:65731): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.705:65731): arch=c000003e syscall=1 success=yes exit=3216 a0=9 a1=36009d0 a2=c90 a3=11 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171452160.705:65731):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171452160.715:65732): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452160.715:65732): arch=c000003e syscall=2 success=yes exit=9 a0=38e1690 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171452166.636:65733): avc:  denied  { create } for  pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452166.636:65733): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171452166.636:65734): avc:  denied  { write } for  pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452166.636:65734): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171452166.636:65734):  path="/home/dhighley/_jsE.GEv0FB.douglas"
>type=AVC msg=audit(1171452166.637:65735): avc:  denied  { getattr } for  pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452166.637:65735): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffb25f1ff0 a2=7fffb25f1ff0 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171452166.637:65735):  path="/home/dhighley/_jsE.GEv0FB.douglas"
>type=AVC msg=audit(1171452166.637:65736): avc:  denied  { link } for  pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452166.637:65736): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61dff0 a2=7fffb25f1f10 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171452166.637:65737): avc:  denied  { unlink } for  pid=19235 comm="procmail" name="_jsE.GEv0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171452166.637:65737): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61dff0 a2=7fffb25f1f10 a3=61b650 items=0 ppid=19230 pid=19235 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171452301.572:65738): user pid=19253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452301.572:65739): login pid=19253 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171452301.575:65740): user pid=19253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452301.575:65741): user pid=19253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171452601.894:65742): user pid=19289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452601.894:65743): login pid=19289 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171452601.896:65744): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452601.897:65745): login pid=19290 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171452601.900:65746): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452601.900:65747): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171452601.902:65748): user pid=19290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452601.902:65749): user pid=19290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171452601.925:65750): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171452601.925:65751): user pid=19289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171452901.239:65752): user pid=19326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171452901.240:65753): login pid=19326 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171452901.243:65754): user pid=19326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171452901.243:65755): user pid=19326 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171453201.573:65756): user pid=19362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171453201.573:65757): login pid=19362 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171453201.575:65758): user pid=19363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171453201.576:65759): login pid=19363 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171453201.577:65760): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171453201.577:65761): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171453201.579:65762): user pid=19363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171453201.580:65763): user pid=19363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171453201.596:65764): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171453201.596:65765): user pid=19362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171453501.912:65766): user pid=19399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171453501.912:65767): login pid=19399 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171453501.915:65768): user pid=19399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171453501.915:65769): user pid=19399 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171453801.249:65770): user pid=19436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171453801.249:65771): login pid=19436 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171453801.249:65772): user pid=19435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171453801.249:65773): login pid=19435 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171453801.252:65774): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171453801.252:65775): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171453801.255:65776): user pid=19436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171453801.255:65777): user pid=19436 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171453801.271:65778): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171453801.271:65779): user pid=19435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171453989.626:65780): avc:  denied  { search } for  pid=19471 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171453989.626:65780): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171453989.627:65781): avc:  denied  { create } for  pid=19471 comm="pyzor" name="SJDu0N" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453989.627:65781): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171453989.627:65782): avc:  denied  { getattr } for  pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453989.627:65782): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb84308d0 a2=7fffb84308d0 a3=3 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171453989.627:65782):  path="/tmp/SJDu0N"
>type=AVC msg=audit(1171453989.628:65783): avc:  denied  { write } for  pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453989.628:65783): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171453989.628:65783):  path="/tmp/SJDu0N"
>type=AVC msg=audit(1171453989.628:65784): avc:  denied  { unlink } for  pid=19471 comm="pyzor" name="SJDu0N" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453989.628:65784): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171453989.629:65785): avc:  denied  { read } for  pid=19471 comm="pyzor" name="tmpznoCgu" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453989.629:65785): arch=c000003e syscall=0 success=yes exit=75 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=19471 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171453989.629:65785):  path=2F746D702F746D707A6E6F436775202864656C6574656429
>type=AVC msg=audit(1171453996.670:65786): avc:  denied  { append } for  pid=19467 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171453996.670:65786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=19462 pid=19467 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171454101.586:65787): user pid=19491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454101.586:65788): login pid=19491 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171454101.590:65789): user pid=19491 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454101.590:65790): user pid=19491 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171454401.915:65791): user pid=19527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454401.915:65792): login pid=19527 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171454401.916:65793): user pid=19528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454401.917:65794): login pid=19528 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171454401.921:65795): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454401.921:65796): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171454401.924:65797): user pid=19528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454401.924:65798): user pid=19528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171454401.944:65799): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171454401.944:65800): user pid=19527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171454461.246:65801): user pid=19543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454461.246:65802): login pid=19543 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171454461.249:65803): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454461.249:65804): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171454462.132:65805): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171454462.133:65806): user pid=19543 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171454521.137:65807): user pid=19563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454521.137:65808): login pid=19563 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171454521.140:65809): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454521.140:65810): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171454701.143:65811): user pid=19593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171454701.143:65812): login pid=19593 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171454701.146:65813): user pid=19593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171454701.146:65814): user pid=19593 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171455001.467:65815): user pid=19631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455001.467:65816): login pid=19631 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171455001.470:65817): user pid=19632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455001.470:65819): login pid=19632 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171455001.470:65818): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455001.470:65820): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171455001.482:65821): user pid=19632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455001.482:65822): user pid=19632 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171455001.488:65823): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171455001.488:65824): user pid=19631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171455301.807:65825): user pid=19670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455301.807:65826): login pid=19670 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171455301.810:65827): user pid=19670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455301.810:65828): user pid=19670 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171455601.137:65829): user pid=19703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455601.138:65830): login pid=19703 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171455601.140:65831): user pid=19704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455601.140:65832): login pid=19704 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171455601.141:65833): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455601.142:65834): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171455601.146:65835): user pid=19704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455601.146:65836): user pid=19704 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171455601.162:65837): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171455601.162:65838): user pid=19703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171455901.480:65839): user pid=19745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171455901.480:65840): login pid=19745 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171455901.484:65841): user pid=19745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171455901.484:65842): user pid=19745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171456201.801:65843): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171456201.801:65844): login pid=19780 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171456201.803:65845): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171456201.804:65846): login pid=19781 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171456201.807:65847): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171456201.807:65848): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171456201.809:65849): user pid=19781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171456201.809:65850): user pid=19781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171456201.827:65851): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171456201.827:65852): user pid=19780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171456501.139:65853): user pid=19817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171456501.139:65854): login pid=19817 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171456501.143:65855): user pid=19817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171456501.143:65856): user pid=19817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171456540.636:65857): avc:  denied  { search } for  pid=19838 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171456540.636:65857): avc:  denied  { write } for  pid=19838 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171456540.636:65857): avc:  denied  { add_name } for  pid=19838 comm="pyzor" name="iFzAis" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171456540.636:65857): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=19838 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171456540.636:65858): avc:  denied  { remove_name } for  pid=19838 comm="pyzor" name="iFzAis" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171456540.636:65858): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=19838 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171456545.597:65859): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171456545.597:65859): arch=c000003e syscall=62 success=yes exit=0 a0=4d7e a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456547.916:65860): avc:  denied  { write } for  pid=19834 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171456547.916:65860): avc:  denied  { add_name } for  pid=19834 comm="procmail" name="_61E.jIw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171456547.916:65860): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19829 pid=19834 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171456547.916:65861): avc:  denied  { remove_name } for  pid=19834 comm="procmail" name="_61E.jIw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171456547.916:65861): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e070 a2=7fff1a4b2dd0 a3=61b650 items=0 ppid=19829 pid=19834 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171456594.573:65862): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456594.573:65862): arch=c000003e syscall=2 success=yes exit=12 a0=3368b00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456594.574:65863): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456594.574:65863): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171456594.574:65863):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171456594.590:65864): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456594.590:65864): arch=c000003e syscall=2 success=yes exit=9 a0=31f7a50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456599.638:65865): avc:  denied  { getattr } for  pid=19852 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456599.638:65865): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff125b1560 a2=7fff125b1560 a3=6c6280 items=0 ppid=29238 pid=19852 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171456599.638:65865):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171456599.638:65866): avc:  denied  { read } for  pid=19852 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456599.638:65866): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=19852 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171456604.718:65867): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.718:65867): arch=c000003e syscall=86 success=yes exit=0 a0=3266f80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456604.718:65868): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.718:65868): arch=c000003e syscall=87 success=yes exit=0 a0=3266f80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456604.719:65869): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.719:65869): arch=c000003e syscall=2 success=yes exit=10 a0=33261a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171456604.730:65870): avc:  denied  { create } for  pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.730:65870): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171456604.730:65871): avc:  denied  { write } for  pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.730:65871): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171456604.730:65871):  path="/home/dhighley/_I2E.cJw0FB.douglas"
>type=AVC msg=audit(1171456604.731:65872): avc:  denied  { getattr } for  pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.731:65872): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff3c575f60 a2=7fff3c575f60 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171456604.731:65872):  path="/home/dhighley/_I2E.cJw0FB.douglas"
>type=AVC msg=audit(1171456604.731:65873): avc:  denied  { link } for  pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.731:65873): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61eb20 a2=7fff3c575e80 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171456604.731:65874): avc:  denied  { unlink } for  pid=19848 comm="procmail" name="_I2E.cJw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171456604.731:65874): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61eb20 a2=7fff3c575e80 a3=61b650 items=0 ppid=19845 pid=19848 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171456801.462:65875): user pid=19884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171456801.462:65876): login pid=19884 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171456801.465:65877): user pid=19885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171456801.465:65878): login pid=19885 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171456801.466:65879): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171456801.466:65880): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171456801.468:65881): user pid=19885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171456801.468:65882): user pid=19885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171456801.496:65883): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171456801.497:65884): user pid=19884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171457101.792:65885): user pid=19922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171457101.793:65886): login pid=19922 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171457101.795:65887): user pid=19922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171457101.796:65888): user pid=19922 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171457401.124:65889): user pid=19969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171457401.124:65890): login pid=19969 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171457401.126:65891): user pid=19970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171457401.127:65892): login pid=19970 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171457401.128:65893): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171457401.128:65894): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171457401.133:65895): user pid=19970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171457401.134:65896): user pid=19970 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171457401.149:65897): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171457401.149:65898): user pid=19969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171457701.459:65899): user pid=20025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171457701.460:65900): login pid=20025 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171457701.463:65901): user pid=20025 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171457701.463:65902): user pid=20025 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171457951.657:65903): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171457951.658:65904): user pid=19563 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171458001.663:65905): user pid=21009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458001.663:65906): login pid=21009 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171458001.665:65907): user pid=21010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458001.666:65908): login pid=21010 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171458001.669:65909): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458001.669:65910): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171458001.672:65911): user pid=21010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458001.672:65912): user pid=21010 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171458001.702:65913): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171458001.702:65914): user pid=21009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171458061.997:65915): user pid=21027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458061.997:65916): login pid=21027 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171458062.001:65917): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458062.002:65918): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171458062.885:65919): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171458062.885:65920): user pid=21027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171458301.892:65921): user pid=21065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458301.892:65922): login pid=21065 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171458301.896:65923): user pid=21065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458301.896:65924): user pid=21065 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171458525.397:65925): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458525.397:65925): arch=c000003e syscall=2 success=yes exit=12 a0=3335cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458525.397:65926): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458525.397:65926): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458525.397:65926):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171458525.409:65927): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458525.409:65927): arch=c000003e syscall=2 success=yes exit=9 a0=3850860 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458530.457:65928): avc:  denied  { search } for  pid=21109 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171458530.457:65928): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171458530.457:65929): avc:  denied  { getattr } for  pid=21109 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.457:65929): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffcfdc1d60 a2=7fffcfdc1d60 a3=6c6280 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458530.457:65929):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171458530.457:65930): avc:  denied  { read } for  pid=21109 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.457:65930): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171458530.458:65931): avc:  denied  { search } for  pid=21109 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171458530.458:65931): avc:  denied  { write } for  pid=21109 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171458530.458:65931): avc:  denied  { add_name } for  pid=21109 comm="pyzor" name="bcbSDc" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171458530.458:65931): avc:  denied  { create } for  pid=21109 comm="pyzor" name="bcbSDc" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.458:65931): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171458530.459:65932): avc:  denied  { getattr } for  pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.459:65932): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcfdbfbd0 a2=7fffcfdbfbd0 a3=3 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458530.459:65932):  path="/tmp/bcbSDc"
>type=AVC msg=audit(1171458530.459:65933): avc:  denied  { write } for  pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.459:65933): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458530.459:65933):  path="/tmp/bcbSDc"
>type=AVC msg=audit(1171458530.459:65934): avc:  denied  { remove_name } for  pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171458530.459:65934): avc:  denied  { unlink } for  pid=21109 comm="pyzor" name="bcbSDc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.459:65934): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=622660 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171458530.460:65935): avc:  denied  { read } for  pid=21109 comm="pyzor" name="tmpVm7ZwH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458530.460:65935): arch=c000003e syscall=0 success=yes exit=2571 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=21109 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458530.460:65935):  path=2F746D702F746D70566D375A7748202864656C6574656429
>type=AVC msg=audit(1171458535.418:65936): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171458535.418:65936): arch=c000003e syscall=62 success=yes exit=0 a0=5275 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458535.429:65937): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.429:65937): arch=c000003e syscall=86 success=yes exit=0 a0=31ef3f0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458535.429:65938): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.429:65938): arch=c000003e syscall=87 success=yes exit=0 a0=31ef3f0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458535.430:65939): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.430:65939): arch=c000003e syscall=2 success=yes exit=10 a0=3201450 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171458535.445:65940): avc:  denied  { write } for  pid=21105 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171458535.445:65940): avc:  denied  { add_name } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171458535.445:65940): avc:  denied  { create } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.445:65940): arch=c000003e syscall=2 success=yes exit=6 a0=61fc50 a1=c1 a2=124 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171458535.446:65941): avc:  denied  { write } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.446:65941): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458535.446:65941):  path="/home/dhighley/_xJF.nnw0FB.douglas"
>type=AVC msg=audit(1171458535.446:65942): avc:  denied  { getattr } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.446:65942): arch=c000003e syscall=4 success=yes exit=0 a0=61fc50 a1=7fff53a8a480 a2=7fff53a8a480 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171458535.446:65942):  path="/home/dhighley/_xJF.nnw0FB.douglas"
>type=AVC msg=audit(1171458535.446:65943): avc:  denied  { link } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.446:65943): arch=c000003e syscall=86 success=yes exit=0 a0=61fc50 a1=61fc30 a2=7fff53a8a3a0 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171458535.446:65944): avc:  denied  { remove_name } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171458535.446:65944): avc:  denied  { unlink } for  pid=21105 comm="procmail" name="_xJF.nnw0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.446:65944): arch=c000003e syscall=87 success=yes exit=0 a0=61fc50 a1=61fc30 a2=7fff53a8a3a0 a3=61fc50 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171458535.446:65945): avc:  denied  { append } for  pid=21105 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171458535.446:65945): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=21100 pid=21105 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171458601.219:65946): user pid=21116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458601.219:65947): login pid=21116 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171458601.222:65948): user pid=21117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458601.222:65949): login pid=21117 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171458601.223:65950): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458601.223:65951): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171458601.233:65952): user pid=21117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458601.233:65953): user pid=21117 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171458601.243:65954): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171458601.243:65955): user pid=21116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171458790.170:65956): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171458790.170:65957): user pid=19020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171458901.174:65958): user pid=21159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171458901.175:65959): login pid=21159 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171458901.178:65960): user pid=21159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171458901.179:65961): user pid=21159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171459201.506:65962): user pid=21210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171459201.506:65963): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171459201.506:65964): login pid=21210 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171459201.506:65965): login pid=21211 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171459201.512:65966): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171459201.512:65967): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171459201.514:65968): user pid=21211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171459201.514:65969): user pid=21211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171459201.535:65970): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171459201.535:65971): user pid=21210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171459477.288:65972): avc:  denied  { search } for  pid=21256 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171459477.288:65972): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171459477.289:65973): avc:  denied  { create } for  pid=21256 comm="pyzor" name="KNiczH" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459477.289:65973): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171459477.289:65974): avc:  denied  { getattr } for  pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459477.289:65974): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb02176b0 a2=7fffb02176b0 a3=3 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171459477.289:65974):  path="/tmp/KNiczH"
>type=AVC msg=audit(1171459477.290:65975): avc:  denied  { write } for  pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459477.290:65975): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171459477.290:65975):  path="/tmp/KNiczH"
>type=AVC msg=audit(1171459477.290:65976): avc:  denied  { unlink } for  pid=21256 comm="pyzor" name="KNiczH" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459477.290:65976): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171459477.291:65977): avc:  denied  { read } for  pid=21256 comm="pyzor" name="tmphkrqGt" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459477.291:65977): arch=c000003e syscall=0 success=yes exit=635 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=21256 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171459477.291:65977):  path=2F746D702F746D70686B72714774202864656C6574656429
>type=AVC msg=audit(1171459482.276:65978): avc:  denied  { append } for  pid=21252 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171459482.276:65978): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=21247 pid=21252 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171459501.849:65979): user pid=21260 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171459501.850:65980): login pid=21260 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171459501.852:65981): user pid=21260 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171459501.852:65982): user pid=21260 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171459801.175:65983): user pid=21299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171459801.176:65984): login pid=21299 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171459801.177:65985): user pid=21298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171459801.177:65986): login pid=21298 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171459801.180:65987): user pid=21299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171459801.180:65988): user pid=21299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171459801.186:65989): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171459801.186:65990): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171459801.208:65991): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171459801.209:65992): user pid=21298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171460101.516:65993): user pid=21334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171460101.516:65994): login pid=21334 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171460101.519:65995): user pid=21334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171460101.519:65996): user pid=21334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171460401.837:65997): user pid=21368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171460401.837:65998): login pid=21368 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171460401.840:65999): user pid=21369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171460401.840:66000): login pid=21369 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171460401.843:66001): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171460401.843:66002): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171460401.845:66003): user pid=21369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171460401.845:66004): user pid=21369 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171460401.864:66005): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171460401.864:66006): user pid=21368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171460478.880:66007): avc:  denied  { search } for  pid=21395 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171460478.880:66007): avc:  denied  { write } for  pid=21395 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171460478.880:66007): avc:  denied  { add_name } for  pid=21395 comm="pyzor" name="MWZ2WV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171460478.880:66007): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171460478.881:66008): avc:  denied  { remove_name } for  pid=21395 comm="pyzor" name="MWZ2WV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171460478.881:66008): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21395 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171460701.170:66009): user pid=21415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171460701.170:66010): login pid=21415 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171460701.175:66011): user pid=21415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171460701.175:66012): user pid=21415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171461001.497:66013): user pid=21449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461001.497:66014): login pid=21449 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171461001.497:66015): user pid=21450 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461001.497:66016): login pid=21450 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171461001.503:66017): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461001.503:66018): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171461001.506:66019): user pid=21450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461001.506:66020): user pid=21450 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171461001.524:66021): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171461001.524:66022): user pid=21449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171461250.695:66023): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461250.695:66023): arch=c000003e syscall=2 success=yes exit=12 a0=302f5e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461250.696:66024): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461250.696:66024): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171461250.696:66024):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171461250.703:66025): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461250.703:66025): arch=c000003e syscall=2 success=yes exit=9 a0=33bdc20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461254.852:66026): avc:  denied  { getattr } for  pid=21492 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461254.852:66026): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd2751700 a2=7fffd2751700 a3=6c6280 items=0 ppid=29238 pid=21492 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171461254.852:66026):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171461254.852:66027): avc:  denied  { read } for  pid=21492 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461254.852:66027): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21492 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171461259.813:66028): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171461259.813:66028): arch=c000003e syscall=62 success=yes exit=0 a0=53f4 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461259.824:66029): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.824:66029): arch=c000003e syscall=86 success=yes exit=0 a0=31ae4d0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461259.824:66030): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.824:66030): arch=c000003e syscall=87 success=yes exit=0 a0=31ae4d0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461259.825:66031): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.825:66031): arch=c000003e syscall=2 success=yes exit=9 a0=322ec30 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171461259.836:66032): avc:  denied  { write } for  pid=21488 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171461259.836:66032): avc:  denied  { add_name } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171461259.836:66032): avc:  denied  { create } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.836:66032): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171461259.836:66033): avc:  denied  { write } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.836:66033): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171461259.836:66033):  path="/home/dhighley/_wPF.LSx0FB.douglas"
>type=AVC msg=audit(1171461259.836:66034): avc:  denied  { getattr } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.836:66034): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7ffffa65b050 a2=7ffffa65b050 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171461259.836:66034):  path="/home/dhighley/_wPF.LSx0FB.douglas"
>type=AVC msg=audit(1171461259.837:66035): avc:  denied  { link } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.837:66035): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffffa65af70 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171461259.837:66036): avc:  denied  { remove_name } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171461259.837:66036): avc:  denied  { unlink } for  pid=21488 comm="procmail" name="_wPF.LSx0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171461259.837:66036): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7ffffa65af70 a3=61a500 items=0 ppid=21483 pid=21488 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171461301.846:66037): user pid=21496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461301.847:66038): login pid=21496 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171461301.851:66039): user pid=21496 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461301.851:66040): user pid=21496 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171461601.181:66041): user pid=21539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461601.181:66042): login pid=21539 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171461601.183:66043): user pid=21540 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461601.184:66044): login pid=21540 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171461601.184:66045): user pid=21538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461601.184:66046): login pid=21538 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171461601.187:66047): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461601.188:66048): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171461601.190:66049): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461601.191:66050): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171461601.202:66051): user pid=21540 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461601.202:66052): user pid=21540 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171461601.215:66053): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171461601.215:66054): user pid=21538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171461661.531:66055): user pid=21559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461661.531:66056): login pid=21559 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171461661.535:66057): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461661.535:66058): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171461662.417:66059): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171461662.417:66060): user pid=21559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171461901.425:66061): user pid=21607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171461901.426:66062): login pid=21607 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171461901.429:66063): user pid=21607 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171461901.429:66064): user pid=21607 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171462201.757:66065): user pid=21648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171462201.757:66066): login pid=21648 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171462201.759:66067): user pid=21649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171462201.760:66068): login pid=21649 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171462201.763:66069): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171462201.763:66070): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171462201.765:66071): user pid=21649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171462201.765:66072): user pid=21649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171462201.784:66073): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171462201.785:66074): user pid=21648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171462384.886:66075): avc:  denied  { setattr } for  pid=29238 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462384.886:66075): arch=c000003e syscall=132 success=yes exit=0 a0=31ab3a0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171462384.887:66076): avc:  denied  { rename } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462384.887:66076): arch=c000003e syscall=82 success=yes exit=0 a0=361e830 a1=3103ab0 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171462395.860:66077): avc:  denied  { search } for  pid=21685 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171462395.860:66077): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171462395.861:66078): avc:  denied  { create } for  pid=21685 comm="pyzor" name="S4Gkzs" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462395.861:66078): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171462395.862:66079): avc:  denied  { getattr } for  pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462395.862:66079): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffce6f710 a2=7ffffce6f710 a3=2 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171462395.862:66079):  path="/tmp/S4Gkzs"
>type=AVC msg=audit(1171462395.862:66080): avc:  denied  { write } for  pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462395.862:66080): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171462395.862:66080):  path="/tmp/S4Gkzs"
>type=AVC msg=audit(1171462395.862:66081): avc:  denied  { unlink } for  pid=21685 comm="pyzor" name="S4Gkzs" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462395.862:66081): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171462395.868:66082): avc:  denied  { read } for  pid=21685 comm="pyzor" name="tmpu-J8wW" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171462395.868:66082): arch=c000003e syscall=0 success=yes exit=3615 a0=4 a1=2aaaaf34d000 a2=1000 a3=2dd items=0 ppid=29238 pid=21685 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171462395.868:66082):  path=2F746D702F746D70752D4A387757202864656C6574656429
>type=USER_ACCT msg=audit(1171462501.092:66083): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171462501.092:66084): login pid=21696 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171462501.097:66085): user pid=21696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171462501.097:66086): user pid=21696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171462801.422:66087): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171462801.422:66088): login pid=21733 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171462801.422:66089): user pid=21732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171462801.422:66090): login pid=21732 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171462801.427:66091): user pid=21733 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171462801.428:66092): user pid=21733 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171462801.432:66093): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171462801.432:66094): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171462801.457:66095): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171462801.457:66096): user pid=21732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171463101.753:66097): user pid=21769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171463101.753:66098): login pid=21769 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171463101.755:66099): user pid=21769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171463101.756:66100): user pid=21769 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171463401.080:66101): user pid=21803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171463401.080:66102): login pid=21803 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171463401.083:66103): user pid=21804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171463401.083:66104): login pid=21804 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171463401.084:66105): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171463401.084:66106): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171463401.086:66107): user pid=21804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171463401.086:66108): user pid=21804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171463401.114:66109): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171463401.114:66110): user pid=21803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171463663.016:66111): avc:  denied  { search } for  pid=21848 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171463663.016:66111): avc:  denied  { write } for  pid=21848 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171463663.016:66111): avc:  denied  { add_name } for  pid=21848 comm="pyzor" name="TgZ9DV" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171463663.016:66111): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=21848 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171463663.017:66112): avc:  denied  { remove_name } for  pid=21848 comm="pyzor" name="TgZ9DV" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171463663.017:66112): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=21848 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171463668.004:66113): avc:  denied  { write } for  pid=21844 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171463668.004:66113): avc:  denied  { add_name } for  pid=21844 comm="procmail" name="_UVF.03x0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171463668.004:66113): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171463668.005:66114): avc:  denied  { remove_name } for  pid=21844 comm="procmail" name="_UVF.03x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171463668.005:66114): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff35db76d0 a3=61a500 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171463668.005:66115): avc:  denied  { append } for  pid=21844 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463668.005:66115): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=21839 pid=21844 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171463701.426:66116): user pid=21852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171463701.427:66117): login pid=21852 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171463701.431:66118): user pid=21852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171463701.431:66119): user pid=21852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171463842.067:66120): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463842.067:66120): arch=c000003e syscall=2 success=yes exit=12 a0=35b58a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463842.067:66121): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463842.067:66121): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171463842.067:66121):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171463842.075:66122): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463842.075:66122): arch=c000003e syscall=2 success=yes exit=9 a0=321a2d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463845.868:66123): avc:  denied  { getattr } for  pid=21881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463845.868:66123): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff72d679e0 a2=7fff72d679e0 a3=6c6280 items=0 ppid=29238 pid=21881 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171463845.868:66123):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171463845.869:66124): avc:  denied  { read } for  pid=21881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463845.869:66124): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=21881 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171463850.831:66125): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171463850.831:66125): arch=c000003e syscall=62 success=yes exit=0 a0=5579 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463850.848:66126): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.848:66126): arch=c000003e syscall=86 success=yes exit=0 a0=35f5a60 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463850.848:66127): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.848:66127): arch=c000003e syscall=87 success=yes exit=0 a0=35f5a60 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463850.849:66128): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.849:66128): arch=c000003e syscall=2 success=yes exit=9 a0=32890a0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171463850.933:66129): avc:  denied  { create } for  pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.933:66129): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171463850.934:66130): avc:  denied  { write } for  pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.934:66130): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171463850.934:66130):  path="/home/dhighley/_0VF.q6x0FB.douglas"
>type=AVC msg=audit(1171463850.934:66131): avc:  denied  { getattr } for  pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.934:66131): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff1b5b2fa0 a2=7fff1b5b2fa0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171463850.934:66131):  path="/home/dhighley/_0VF.q6x0FB.douglas"
>type=AVC msg=audit(1171463850.934:66132): avc:  denied  { link } for  pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.934:66132): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=6202b0 a2=7fff1b5b2ec0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171463850.934:66133): avc:  denied  { unlink } for  pid=21876 comm="procmail" name="_0VF.q6x0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171463850.934:66133): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=6202b0 a2=7fff1b5b2ec0 a3=61b650 items=0 ppid=21873 pid=21876 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171464001.757:66134): user pid=21903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171464001.757:66135): user pid=21904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171464001.757:66136): login pid=21903 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171464001.757:66137): login pid=21904 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171464001.763:66138): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464001.763:66139): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171464001.764:66140): user pid=21904 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464001.764:66141): user pid=21904 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171464001.784:66142): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171464001.784:66143): user pid=21903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171464301.102:66144): user pid=21952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171464301.102:66145): login pid=21952 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171464301.108:66146): user pid=21952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464301.108:66147): user pid=21952 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171464601.431:66148): user pid=21997 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171464601.432:66150): login pid=21997 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171464601.432:66149): user pid=21996 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171464601.432:66151): login pid=21996 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171464601.437:66152): user pid=21997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464601.437:66153): user pid=21997 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171464601.443:66154): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464601.443:66155): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171464601.467:66156): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171464601.467:66157): user pid=21996 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171464870.528:66158): avc:  denied  { search } for  pid=22043 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171464870.528:66158): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171464870.529:66159): avc:  denied  { create } for  pid=22043 comm="pyzor" name="XrMEG8" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464870.529:66159): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171464870.530:66160): avc:  denied  { getattr } for  pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464870.530:66160): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0b36a800 a2=7fff0b36a800 a3=3 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171464870.530:66160):  path="/tmp/XrMEG8"
>type=AVC msg=audit(1171464870.530:66161): avc:  denied  { write } for  pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464870.530:66161): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15804 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171464870.530:66161):  path="/tmp/XrMEG8"
>type=AVC msg=audit(1171464870.530:66162): avc:  denied  { unlink } for  pid=22043 comm="pyzor" name="XrMEG8" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464870.530:66162): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171464870.533:66163): avc:  denied  { read } for  pid=22043 comm="pyzor" name="tmpqG8nWc" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464870.533:66163): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=22043 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171464870.533:66163):  path=2F746D702F746D707147386E5763202864656C6574656429
>type=AVC msg=audit(1171464875.518:66164): avc:  denied  { append } for  pid=22039 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171464875.518:66164): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=22034 pid=22039 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171464901.769:66165): user pid=22047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171464901.770:66166): login pid=22047 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171464901.773:66167): user pid=22047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171464901.773:66168): user pid=22047 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171465201.098:66169): user pid=22084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465201.098:66170): login pid=22084 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171465201.100:66171): user pid=22085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465201.100:66172): login pid=22085 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171465201.101:66173): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465201.102:66174): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171465201.110:66175): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465201.111:66176): user pid=22085 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171465201.119:66177): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171465201.119:66178): user pid=22084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171465261.428:66179): user pid=22104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465261.428:66180): login pid=22104 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171465261.432:66181): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465261.432:66182): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171465262.320:66183): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171465262.320:66184): user pid=22104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171465364.256:66185): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465364.256:66185): arch=c000003e syscall=2 success=yes exit=9 a0=38db840 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171465368.315:66186): avc:  denied  { search } for  pid=22140 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171465368.315:66186): avc:  denied  { write } for  pid=22140 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171465368.315:66186): avc:  denied  { add_name } for  pid=22140 comm="pyzor" name="KN2HDY" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171465368.315:66186): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=22140 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171465368.315:66187): avc:  denied  { remove_name } for  pid=22140 comm="pyzor" name="KN2HDY" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171465368.315:66187): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22140 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171465373.275:66188): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171465373.275:66188): arch=c000003e syscall=62 success=yes exit=0 a0=567c a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171465373.289:66189): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.289:66189): arch=c000003e syscall=2 success=yes exit=9 a0=3719970 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171465373.300:66190): avc:  denied  { write } for  pid=22136 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171465373.300:66190): avc:  denied  { add_name } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171465373.300:66190): avc:  denied  { create } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.300:66190): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171465373.300:66191): avc:  denied  { write } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.300:66191): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171465373.300:66191):  path="/home/dhighley/_4ZF.dSy0FB.douglas"
>type=AVC msg=audit(1171465373.301:66192): avc:  denied  { getattr } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.301:66192): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff48497e90 a2=7fff48497e90 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171465373.301:66192):  path="/home/dhighley/_4ZF.dSy0FB.douglas"
>type=AVC msg=audit(1171465373.301:66193): avc:  denied  { link } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.301:66193): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61fd90 a2=7fff48497db0 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171465373.301:66194): avc:  denied  { remove_name } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171465373.301:66194): avc:  denied  { unlink } for  pid=22136 comm="procmail" name="_4ZF.dSy0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465373.301:66194): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61fd90 a2=7fff48497db0 a3=61b650 items=0 ppid=22131 pid=22136 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171465501.327:66195): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465501.327:66196): login pid=22152 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171465501.332:66197): user pid=22152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465501.332:66198): user pid=22152 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171465801.671:66199): user pid=22189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465801.672:66200): login pid=22189 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171465801.673:66201): user pid=22190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171465801.673:66202): login pid=22190 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171465801.678:66203): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465801.678:66204): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171465801.682:66205): user pid=22190 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171465801.682:66206): user pid=22190 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171465801.696:66207): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171465801.697:66208): user pid=22189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171465922.067:66209): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465922.067:66209): arch=c000003e syscall=2 success=yes exit=12 a0=3867a40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171465922.067:66210): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465922.067:66210): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171465922.067:66210):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171465932.276:66211): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465932.276:66211): arch=c000003e syscall=86 success=yes exit=0 a0=3124af0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171465932.276:66212): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171465932.276:66212): arch=c000003e syscall=87 success=yes exit=0 a0=3124af0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171466101.019:66213): user pid=22237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171466101.020:66214): login pid=22237 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171466101.022:66215): user pid=22237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171466101.022:66216): user pid=22237 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171466401.344:66217): user pid=22280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171466401.344:66218): login pid=22280 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171466401.346:66219): user pid=22281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171466401.346:66220): login pid=22281 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171466401.348:66221): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171466401.348:66222): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171466401.351:66223): user pid=22281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171466401.351:66224): user pid=22281 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171466401.369:66225): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171466401.369:66226): user pid=22280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171466690.021:66227): avc:  denied  { search } for  pid=22322 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171466690.021:66227): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22322 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171466701.692:66228): user pid=22325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171466701.692:66229): login pid=22325 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171466701.696:66230): user pid=22325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171466701.696:66231): user pid=22325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171466825.393:66232): avc:  denied  { create } for  pid=22359 comm="pyzor" name="nS0Cp6" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171466825.393:66232): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171466825.393:66233): avc:  denied  { getattr } for  pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171466825.393:66233): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff09f3f7e0 a2=7fff09f3f7e0 a3=2 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171466825.393:66233):  path="/tmp/nS0Cp6"
>type=AVC msg=audit(1171466825.393:66234): avc:  denied  { write } for  pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171466825.393:66234): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171466825.393:66234):  path="/tmp/nS0Cp6"
>type=AVC msg=audit(1171466825.394:66235): avc:  denied  { unlink } for  pid=22359 comm="pyzor" name="nS0Cp6" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171466825.394:66235): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171466825.399:66236): avc:  denied  { read } for  pid=22359 comm="pyzor" name="tmpOY3YKe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171466825.399:66236): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=554 items=0 ppid=29238 pid=22359 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171466825.399:66236):  path=2F746D702F746D704F5933594B65202864656C6574656429
>type=USER_ACCT msg=audit(1171467001.025:66237): user pid=22379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467001.025:66238): login pid=22379 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171467001.027:66239): user pid=22380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467001.027:66240): login pid=22380 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171467001.028:66241): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467001.028:66242): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171467001.037:66243): user pid=22380 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467001.037:66244): user pid=22380 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171467001.047:66245): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171467001.047:66246): user pid=22379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171467284.796:66247): avc:  denied  { append } for  pid=22414 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171467284.796:66247): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=22411 pid=22414 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171467301.376:66248): user pid=22423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467301.376:66249): login pid=22423 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171467301.381:66250): user pid=22423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467301.381:66251): user pid=22423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171467601.706:66252): user pid=22459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467601.706:66253): login pid=22459 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171467601.709:66254): user pid=22460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467601.709:66255): login pid=22460 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171467601.710:66256): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467601.710:66257): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171467601.715:66258): user pid=22460 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467601.716:66259): user pid=22460 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171467601.740:66260): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171467601.741:66261): user pid=22459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171467658.505:66262): avc:  denied  { search } for  pid=22483 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171467658.505:66262): avc:  denied  { write } for  pid=22483 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171467658.505:66262): avc:  denied  { add_name } for  pid=22483 comm="pyzor" name="JzVF4f" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171467658.505:66262): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=22483 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171467658.506:66263): avc:  denied  { remove_name } for  pid=22483 comm="pyzor" name="JzVF4f" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171467658.506:66263): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22483 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171467857.875:66264): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=failed)'
>type=USER_LOGIN msg=audit(1171467857.875:66265): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.2.2.2, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1171467861.816:66266): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171467861.816:66267): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171467861.826:66268): user pid=22505 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171467861.827:66269): login pid=22505 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171467861.828:66270): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171467861.876:66271): user pid=22508 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_REFR msg=audit(1171467861.887:66272): user pid=22508 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1171467899.535:66273): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171467899.536:66274): user pid=22505 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171467901.039:66275): user pid=22550 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171467901.040:66276): login pid=22550 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171467901.043:66277): user pid=22550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171467901.043:66278): user pid=22550 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171467967.796:66279): user pid=22571 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171467967.799:66280): user pid=22571 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171467967.799:66281): login pid=22571 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171467967.800:66282): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171467967.809:66283): user pid=22574 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171467967.898:66284): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1171467991.789:66285): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171467991.789:66286): user pid=22571 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=AVC msg=audit(1171468078.033:66287): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468078.033:66287): arch=c000003e syscall=2 success=yes exit=12 a0=38ae350 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468078.033:66288): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468078.033:66288): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468078.033:66288):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171468078.050:66289): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468078.050:66289): arch=c000003e syscall=2 success=yes exit=9 a0=35b5b90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468083.099:66290): avc:  denied  { getattr } for  pid=22634 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468083.099:66290): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdf1140c0 a2=7fffdf1140c0 a3=6c6280 items=0 ppid=29238 pid=22634 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468083.099:66290):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171468083.099:66291): avc:  denied  { read } for  pid=22634 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468083.099:66291): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22634 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171468088.061:66292): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171468088.061:66292): arch=c000003e syscall=62 success=yes exit=0 a0=586a a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468088.274:66293): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.274:66293): arch=c000003e syscall=86 success=yes exit=0 a0=334ce80 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468088.274:66294): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.274:66294): arch=c000003e syscall=87 success=yes exit=0 a0=334ce80 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468088.275:66295): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.275:66295): arch=c000003e syscall=2 success=yes exit=10 a0=37e0d60 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171468088.293:66296): avc:  denied  { write } for  pid=22630 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171468088.293:66296): avc:  denied  { add_name } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171468088.293:66296): avc:  denied  { create } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.293:66296): arch=c000003e syscall=2 success=yes exit=6 a0=61f460 a1=c1 a2=124 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171468088.293:66297): avc:  denied  { write } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.293:66297): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468088.293:66297):  path="/home/dhighley/_mhF.48y0FB.douglas"
>type=AVC msg=audit(1171468088.294:66298): avc:  denied  { getattr } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.294:66298): arch=c000003e syscall=4 success=yes exit=0 a0=61f460 a1=7fff253a9da0 a2=7fff253a9da0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468088.294:66298):  path="/home/dhighley/_mhF.48y0FB.douglas"
>type=AVC msg=audit(1171468088.294:66299): avc:  denied  { link } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.294:66299): arch=c000003e syscall=86 success=yes exit=0 a0=61f460 a1=61b510 a2=7fff253a9cc0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171468088.294:66300): avc:  denied  { remove_name } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171468088.294:66300): avc:  denied  { unlink } for  pid=22630 comm="procmail" name="_mhF.48y0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468088.294:66300): arch=c000003e syscall=87 success=yes exit=0 a0=61f460 a1=61b510 a2=7fff253a9cc0 a3=61f460 items=0 ppid=22627 pid=22630 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171468201.368:66301): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468201.368:66302): login pid=22647 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171468201.369:66303): user pid=22648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468201.370:66304): login pid=22648 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171468201.375:66305): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468201.375:66306): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171468201.378:66307): user pid=22648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468201.378:66308): user pid=22648 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171468201.398:66309): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171468201.399:66310): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171468473.345:66311): avc:  denied  { search } for  pid=22687 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171468473.345:66311): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171468473.345:66312): avc:  denied  { search } for  pid=22687 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171468473.345:66312): avc:  denied  { write } for  pid=22687 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171468473.345:66312): avc:  denied  { add_name } for  pid=22687 comm="pyzor" name="BZVVkG" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171468473.345:66312): avc:  denied  { create } for  pid=22687 comm="pyzor" name="BZVVkG" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468473.345:66312): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171468473.346:66313): avc:  denied  { getattr } for  pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468473.346:66313): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff2f3e3d0 a2=7ffff2f3e3d0 a3=3 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468473.346:66313):  path="/tmp/BZVVkG"
>type=AVC msg=audit(1171468473.346:66314): avc:  denied  { write } for  pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468473.346:66314): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157a4 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468473.346:66314):  path="/tmp/BZVVkG"
>type=AVC msg=audit(1171468473.346:66315): avc:  denied  { remove_name } for  pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171468473.346:66315): avc:  denied  { unlink } for  pid=22687 comm="pyzor" name="BZVVkG" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468473.346:66315): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171468473.347:66316): avc:  denied  { read } for  pid=22687 comm="pyzor" name="tmpeFH1k9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171468473.347:66316): arch=c000003e syscall=0 success=yes exit=661 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=22687 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171468473.347:66316):  path=2F746D702F746D70654648316B39202864656C6574656429
>type=USER_ACCT msg=audit(1171468501.711:66317): user pid=22693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468501.711:66318): login pid=22693 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171468501.715:66319): user pid=22693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468501.715:66320): user pid=22693 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171468801.043:66321): user pid=22731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468801.044:66322): login pid=22731 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171468801.046:66323): user pid=22732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468801.047:66324): login pid=22732 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171468801.047:66325): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468801.047:66326): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171468801.057:66327): user pid=22732 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468801.058:66328): user pid=22732 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171468801.066:66329): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171468801.067:66330): user pid=22731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171468861.391:66331): user pid=22750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171468861.391:66332): login pid=22750 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171468861.395:66333): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171468861.395:66334): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171468862.278:66335): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171468862.278:66336): user pid=22750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171469101.285:66337): user pid=22786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171469101.285:66338): login pid=22786 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171469101.288:66339): user pid=22786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171469101.288:66340): user pid=22786 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171469401.613:66341): user pid=22825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171469401.613:66342): login pid=22825 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171469401.615:66343): user pid=22826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171469401.615:66344): login pid=22826 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171469401.617:66345): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171469401.617:66346): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171469401.620:66347): user pid=22826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171469401.621:66348): user pid=22826 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171469401.638:66349): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171469401.638:66350): user pid=22825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171469629.471:66351): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171469629.471:66352): user pid=21539 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171469701.475:66353): user pid=22865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171469701.475:66354): login pid=22865 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171469701.478:66355): user pid=22865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171469701.478:66356): user pid=22865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171469876.961:66357): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171469876.961:66357): arch=c000003e syscall=2 success=yes exit=9 a0=3868b30 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171469881.526:66358): avc:  denied  { getattr } for  pid=22896 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171469881.526:66358): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffeae81e30 a2=7fffeae81e30 a3=6c6280 items=0 ppid=29238 pid=22896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171469881.526:66358):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171469881.526:66359): avc:  denied  { read } for  pid=22896 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171469881.526:66359): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=22896 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171469886.488:66360): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171469886.488:66360): arch=c000003e syscall=62 success=yes exit=0 a0=5970 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171469886.567:66361): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171469886.567:66361): arch=c000003e syscall=2 success=yes exit=9 a0=3757db0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171470001.804:66362): user pid=22908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470001.804:66363): login pid=22908 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171470001.806:66364): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470001.806:66365): login pid=22907 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171470001.808:66366): user pid=22908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470001.808:66367): user pid=22908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171470001.812:66368): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470001.812:66369): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171470001.833:66370): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171470001.833:66371): user pid=22907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171470301.133:66372): user pid=22945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470301.134:66373): login pid=22945 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171470301.137:66374): user pid=22945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470301.138:66375): user pid=22945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171470601.465:66376): user pid=22980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470601.465:66377): login pid=22980 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171470601.466:66378): user pid=22981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470601.466:66379): login pid=22981 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171470601.472:66380): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470601.472:66381): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171470601.477:66382): user pid=22981 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470601.477:66383): user pid=22981 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171470601.492:66384): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171470601.493:66385): user pid=22980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171470901.806:66386): user pid=23017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171470901.806:66387): login pid=23017 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171470901.810:66388): user pid=23017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171470901.810:66389): user pid=23017 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171471201.132:66390): user pid=23052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171471201.132:66391): login pid=23052 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171471201.134:66392): user pid=23053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171471201.134:66393): login pid=23053 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171471201.135:66394): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171471201.135:66395): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171471201.147:66396): user pid=23053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171471201.147:66397): user pid=23053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171471201.153:66398): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171471201.153:66399): user pid=23052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171471501.467:66400): user pid=23090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171471501.468:66401): login pid=23090 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171471501.471:66402): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171471501.471:66403): user pid=23090 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171471801.791:66404): user pid=23123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171471801.791:66405): login pid=23123 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171471801.793:66406): user pid=23124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171471801.794:66407): login pid=23124 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171471801.797:66408): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171471801.797:66409): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171471801.799:66410): user pid=23124 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171471801.799:66411): user pid=23124 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171471801.818:66412): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171471801.818:66413): user pid=23123 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171472101.124:66414): user pid=23160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472101.124:66415): login pid=23160 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171472101.128:66416): user pid=23160 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472101.128:66417): user pid=23160 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171472325.079:66418): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472325.079:66418): arch=c000003e syscall=2 success=yes exit=12 a0=3311440 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171472325.080:66419): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472325.080:66419): arch=c000003e syscall=16 success=no exit=-25 a0=c a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171472325.080:66419):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171472333.963:66420): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.963:66420): arch=c000003e syscall=86 success=yes exit=0 a0=37f8b70 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171472333.963:66421): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.963:66421): arch=c000003e syscall=87 success=yes exit=0 a0=37f8b70 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171472333.976:66422): avc:  denied  { write } for  pid=23194 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171472333.976:66422): avc:  denied  { add_name } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171472333.976:66422): avc:  denied  { create } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.976:66422): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171472333.977:66423): avc:  denied  { write } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.977:66423): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171472333.977:66423):  path="/home/dhighley/_aqF.N_z0FB.douglas"
>type=AVC msg=audit(1171472333.977:66424): avc:  denied  { getattr } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.977:66424): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fffc8c5a650 a2=7fffc8c5a650 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171472333.977:66424):  path="/home/dhighley/_aqF.N_z0FB.douglas"
>type=AVC msg=audit(1171472333.977:66425): avc:  denied  { link } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.977:66425): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fffc8c5a570 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171472333.977:66426): avc:  denied  { remove_name } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171472333.977:66426): avc:  denied  { unlink } for  pid=23194 comm="procmail" name="_aqF.N_z0FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171472333.977:66426): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fffc8c5a570 a3=61b670 items=0 ppid=23191 pid=23194 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171472401.453:66427): user pid=23207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472401.453:66428): login pid=23207 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171472401.455:66429): user pid=23208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472401.456:66430): login pid=23208 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171472401.456:66431): user pid=23209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472401.456:66432): login pid=23209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171472401.459:66433): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472401.459:66434): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171472401.461:66435): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472401.461:66436): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171472401.470:66437): user pid=23209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472401.471:66438): user pid=23209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171472401.480:66439): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171472401.480:66440): user pid=23207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171472461.795:66441): user pid=23228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472461.795:66442): login pid=23228 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171472461.798:66443): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472461.798:66444): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171472462.698:66445): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171472462.699:66446): user pid=23228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171472701.704:66447): user pid=23272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171472701.704:66448): login pid=23272 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171472701.707:66449): user pid=23272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171472701.707:66450): user pid=23272 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171473001.028:66451): user pid=23313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473001.028:66452): login pid=23313 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171473001.029:66453): user pid=23314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473001.029:66454): login pid=23314 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171473001.034:66455): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473001.034:66456): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171473001.037:66457): user pid=23314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473001.038:66458): user pid=23314 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171473001.053:66459): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171473001.053:66460): user pid=23313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171473301.368:66461): user pid=23355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473301.368:66462): login pid=23355 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171473301.372:66463): user pid=23355 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473301.372:66464): user pid=23355 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171473601.692:66465): user pid=23389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473601.692:66466): login pid=23389 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171473601.693:66467): user pid=23390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473601.694:66468): login pid=23390 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171473601.698:66469): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473601.698:66470): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171473601.704:66471): user pid=23390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473601.704:66472): user pid=23390 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171473601.719:66473): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171473601.719:66474): user pid=23389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171473901.027:66475): user pid=23427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171473901.028:66476): login pid=23427 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171473901.032:66477): user pid=23427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171473901.032:66478): user pid=23427 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171474201.359:66479): user pid=23488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171474201.360:66480): login pid=23488 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171474201.362:66481): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171474201.362:66482): login pid=23489 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171474201.362:66483): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171474201.363:66484): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171474201.367:66485): user pid=23489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171474201.367:66486): user pid=23489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171474201.384:66487): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171474201.384:66488): user pid=23488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171474501.695:66489): user pid=23523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171474501.696:66490): login pid=23523 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171474501.698:66491): user pid=23523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171474501.698:66492): user pid=23523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171474801.017:66493): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171474801.017:66494): login pid=23559 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171474801.020:66495): user pid=23560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171474801.020:66496): login pid=23560 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171474801.023:66497): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171474801.023:66498): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171474801.025:66499): user pid=23560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171474801.025:66500): user pid=23560 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171474801.043:66501): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171474801.043:66502): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171475101.363:66503): user pid=23595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171475101.363:66504): login pid=23595 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171475101.367:66505): user pid=23595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171475101.367:66506): user pid=23595 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171475401.696:66507): user pid=23627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171475401.696:66508): login pid=23627 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171475401.698:66509): user pid=23628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171475401.698:66510): login pid=23628 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171475401.700:66511): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171475401.700:66512): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171475401.705:66513): user pid=23628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171475401.705:66514): user pid=23628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171475401.720:66515): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171475401.720:66516): user pid=23627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171475701.036:66517): user pid=23664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171475701.036:66518): login pid=23664 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171475701.041:66519): user pid=23664 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171475701.041:66520): user pid=23664 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171476001.365:66521): user pid=23697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476001.365:66522): login pid=23697 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171476001.366:66523): user pid=23698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476001.366:66524): login pid=23698 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171476001.368:66525): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476001.368:66526): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171476001.371:66527): user pid=23698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476001.371:66528): user pid=23698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171476001.405:66529): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171476001.405:66530): user pid=23697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171476061.700:66531): user pid=23713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476061.700:66532): login pid=23713 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171476061.703:66533): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476061.703:66534): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171476062.617:66535): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171476062.617:66536): user pid=23713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171476301.624:66537): user pid=23751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476301.624:66538): login pid=23751 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171476301.628:66539): user pid=23751 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476301.628:66540): user pid=23751 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171476566.479:66541): user pid=23790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171476566.480:66542): user pid=23790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171476566.481:66543): login pid=23790 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171476566.481:66544): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171476566.492:66545): user pid=23793 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171476566.583:66546): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1171476573.673:66547): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171476573.673:66548): user pid=23790 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171476601.948:66549): user pid=23834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476601.948:66550): login pid=23834 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171476601.950:66551): user pid=23835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476601.950:66552): login pid=23835 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171476601.954:66553): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476601.954:66554): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171476601.956:66555): user pid=23835 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476601.956:66556): user pid=23835 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171476601.978:66557): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171476601.978:66558): user pid=23834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171476901.298:66559): user pid=23875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171476901.298:66560): login pid=23875 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171476901.301:66561): user pid=23875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171476901.301:66562): user pid=23875 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171476941.938:66563): avc:  denied  { search } for  pid=23895 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171476941.938:66563): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171476941.938:66564): avc:  denied  { getattr } for  pid=23895 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.938:66564): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb7c60c00 a2=7fffb7c60c00 a3=6c6280 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171476941.938:66564):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171476941.939:66565): avc:  denied  { read } for  pid=23895 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.939:66565): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171476941.939:66566): avc:  denied  { create } for  pid=23895 comm="pyzor" name="CXGp5v" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.939:66566): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171476941.940:66567): avc:  denied  { getattr } for  pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.940:66567): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb7c5f500 a2=7fffb7c5f500 a3=2 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171476941.940:66567):  path="/tmp/CXGp5v"
>type=AVC msg=audit(1171476941.940:66568): avc:  denied  { write } for  pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.940:66568): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8e94 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171476941.940:66568):  path="/tmp/CXGp5v"
>type=AVC msg=audit(1171476941.940:66569): avc:  denied  { unlink } for  pid=23895 comm="pyzor" name="CXGp5v" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476941.940:66569): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=29238 pid=23895 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171476942.255:66570): avc:  denied  { write } for  pid=29238 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171476942.255:66570): arch=c000003e syscall=2 success=yes exit=10 a0=30234c0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171477201.635:66571): user pid=23918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171477201.635:66572): login pid=23918 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171477201.637:66573): user pid=23919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171477201.637:66574): login pid=23919 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171477201.641:66575): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171477201.641:66576): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171477201.643:66577): user pid=23919 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171477201.643:66578): user pid=23919 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171477201.671:66579): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171477201.671:66580): user pid=23918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171477501.974:66581): user pid=23955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171477501.974:66582): login pid=23955 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171477501.977:66583): user pid=23955 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171477501.977:66584): user pid=23955 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171477801.305:66585): user pid=23995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171477801.305:66586): login pid=23995 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171477801.307:66587): user pid=23994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171477801.307:66588): login pid=23994 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171477801.311:66589): user pid=23995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171477801.312:66590): user pid=23995 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171477801.314:66591): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171477801.314:66592): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171477801.337:66593): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171477801.337:66594): user pid=23994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171478101.637:66595): user pid=24031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171478101.637:66596): login pid=24031 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171478101.640:66597): user pid=24031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171478101.640:66598): user pid=24031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171478309.001:66599): avc:  denied  { append } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478309.001:66599): arch=c000003e syscall=2 success=yes exit=13 a0=32627a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171478309.001:66600): avc:  denied  { ioctl } for  pid=29238 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478309.001:66600): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171478309.001:66600):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171478309.009:66601): avc:  denied  { append } for  pid=29238 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478309.009:66601): arch=c000003e syscall=2 success=yes exit=9 a0=2c64a90 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171478313.082:66602): avc:  denied  { read } for  pid=24071 comm="pyzor" name="tmpLjJPo9" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478313.082:66602): arch=c000003e syscall=0 success=yes exit=2857 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=29238 pid=24071 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171478313.082:66602):  path=2F746D702F746D704C6A4A506F39202864656C6574656429
>type=AVC msg=audit(1171478318.043:66603): avc:  denied  { signal } for  pid=29238 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171478318.043:66603): arch=c000003e syscall=62 success=yes exit=0 a0=5e07 a1=f a2=54 a3=0 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171478318.051:66604): avc:  denied  { link } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478318.051:66604): arch=c000003e syscall=86 success=yes exit=0 a0=386d4e0 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171478318.051:66605): avc:  denied  { unlink } for  pid=29238 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.29238" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478318.051:66605): arch=c000003e syscall=87 success=yes exit=0 a0=386d4e0 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=29238 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171478401.960:66606): user pid=24079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171478401.960:66607): login pid=24079 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171478401.962:66608): user pid=24080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171478401.962:66609): login pid=24080 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171478401.964:66610): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171478401.964:66611): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171478401.973:66612): user pid=24080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171478401.973:66613): user pid=24080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171478401.984:66614): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171478401.984:66615): user pid=24079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171478475.688:66616): avc:  denied  { create } for  pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66616): arch=c000003e syscall=2 success=yes exit=6 a0=61b020 a1=c1 a2=124 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171478475.688:66617): avc:  denied  { write } for  pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66617): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171478475.688:66617):  path="/home/dhighley/_k4F.Lf10FB.douglas"
>type=AVC msg=audit(1171478475.688:66618): avc:  denied  { getattr } for  pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66618): arch=c000003e syscall=4 success=yes exit=0 a0=61b020 a1=7fff13ba05a0 a2=7fff13ba05a0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171478475.688:66618):  path="/home/dhighley/_k4F.Lf10FB.douglas"
>type=AVC msg=audit(1171478475.688:66619): avc:  denied  { link } for  pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66619): arch=c000003e syscall=86 success=yes exit=0 a0=61b020 a1=61c920 a2=7fff13ba04c0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171478475.688:66620): avc:  denied  { unlink } for  pid=24100 comm="procmail" name="_k4F.Lf10FB.douglas" dev=dm-0 ino=12484621 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66620): arch=c000003e syscall=87 success=yes exit=0 a0=61b020 a1=61c920 a2=7fff13ba04c0 a3=61b020 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171478475.688:66621): avc:  denied  { append } for  pid=24100 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171478475.688:66621): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=24097 pid=24100 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171478701.308:66622): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171478701.308:66623): login pid=24128 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171478701.312:66624): user pid=24128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171478701.312:66625): user pid=24128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171479001.631:66626): user pid=24161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479001.631:66627): login pid=24161 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171479001.633:66628): user pid=24162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479001.633:66629): login pid=24162 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171479001.634:66630): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479001.634:66631): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171479001.644:66632): user pid=24162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479001.644:66633): user pid=24162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171479001.668:66634): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171479001.668:66635): user pid=24161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171479301.963:66636): user pid=24197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479301.963:66637): login pid=24197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171479301.967:66638): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479301.967:66639): user pid=24197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171479601.286:66640): user pid=24232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479601.286:66641): login pid=24232 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171479601.288:66642): user pid=24231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479601.288:66643): login pid=24231 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171479601.292:66644): user pid=24232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479601.292:66645): user pid=24232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171479601.295:66646): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479601.295:66647): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171479601.316:66648): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171479601.316:66649): user pid=24231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171479661.612:66650): user pid=24246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479661.613:66651): login pid=24246 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171479661.615:66652): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479661.615:66653): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171479662.498:66654): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171479662.498:66655): user pid=24246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171479901.504:66656): user pid=24283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171479901.504:66657): login pid=24283 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171479901.507:66658): user pid=24283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171479901.507:66659): user pid=24283 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171480201.826:66660): user pid=24330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171480201.827:66661): login pid=24330 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171480201.829:66662): user pid=24331 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171480201.829:66663): login pid=24331 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171480201.830:66664): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171480201.831:66665): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171480201.836:66666): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171480201.836:66667): user pid=24331 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171480201.852:66668): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171480201.852:66669): user pid=24330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171480387.541:66670): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171480387.541:66671): user pid=23208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171480501.546:66672): user pid=24384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171480501.546:66673): login pid=24384 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171480501.549:66674): user pid=24384 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171480501.549:66675): user pid=24384 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171480801.870:66676): user pid=24420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171480801.871:66677): login pid=24420 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171480801.872:66678): user pid=24419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171480801.872:66679): login pid=24419 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171480801.876:66680): user pid=24420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171480801.877:66681): user pid=24420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171480801.879:66682): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171480801.880:66683): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171480801.902:66684): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171480801.902:66685): user pid=24419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171480810.954:66686): avc:  denied  { search } for  pid=24440 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171480810.954:66686): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=29238 pid=24440 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171481101.213:66687): user pid=24462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171481101.213:66688): login pid=24462 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171481101.218:66689): user pid=24462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171481101.218:66690): user pid=24462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171481401.538:66691): user pid=24505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171481401.538:66692): login pid=24505 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171481401.540:66693): user pid=24506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171481401.540:66694): login pid=24506 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171481401.542:66695): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171481401.542:66696): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171481401.550:66697): user pid=24506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171481401.551:66698): user pid=24506 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171481401.560:66699): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171481401.561:66700): user pid=24505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171481701.881:66701): user pid=24542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171481701.881:66702): login pid=24542 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171481701.884:66703): user pid=24542 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171481701.884:66704): user pid=24542 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171482001.206:66705): user pid=24574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482001.207:66706): login pid=24574 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171482001.209:66707): user pid=24575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482001.209:66708): login pid=24575 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171482001.210:66709): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482001.211:66710): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171482001.216:66711): user pid=24575 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482001.216:66712): user pid=24575 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171482001.230:66713): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171482001.230:66714): user pid=24574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171482301.549:66715): user pid=24611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482301.549:66716): login pid=24611 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171482301.552:66717): user pid=24611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482301.552:66718): user pid=24611 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171482601.885:66719): user pid=24646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482601.885:66720): login pid=24646 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171482601.887:66721): user pid=24647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482601.888:66722): login pid=24647 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171482601.889:66723): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482601.889:66724): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171482601.892:66725): user pid=24647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482601.893:66726): user pid=24647 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171482601.919:66727): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171482601.919:66728): user pid=24646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171482901.216:66729): user pid=24683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171482901.216:66730): login pid=24683 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171482901.218:66731): user pid=24683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171482901.218:66732): user pid=24683 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171483201.537:66733): user pid=24716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483201.537:66734): login pid=24716 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171483201.540:66735): user pid=24717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483201.540:66736): login pid=24717 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171483201.542:66737): user pid=24718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483201.542:66738): login pid=24718 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171483201.543:66739): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483201.543:66740): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171483201.543:66741): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483201.543:66742): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171483201.558:66743): user pid=24718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483201.558:66744): user pid=24718 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171483201.562:66745): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171483201.562:66746): user pid=24716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171483261.878:66747): user pid=24737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483261.879:66748): login pid=24737 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171483261.884:66749): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483261.884:66750): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171483262.786:66751): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171483262.786:66752): user pid=24737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171483501.794:66753): user pid=24773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483501.794:66754): login pid=24773 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171483501.797:66755): user pid=24773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483501.797:66756): user pid=24773 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171483607.198:66757): avc:  denied  { create } for  pid=24800 comm="pyzor" name="6ocyDi" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171483607.198:66757): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171483607.198:66758): avc:  denied  { getattr } for  pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171483607.198:66758): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd7c9c130 a2=7fffd7c9c130 a3=3 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171483607.198:66758):  path="/tmp/6ocyDi"
>type=AVC msg=audit(1171483607.198:66759): avc:  denied  { write } for  pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171483607.198:66759): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171483607.198:66759):  path="/tmp/6ocyDi"
>type=AVC msg=audit(1171483607.199:66760): avc:  denied  { unlink } for  pid=24800 comm="pyzor" name="6ocyDi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171483607.199:66760): arch=c000003e syscall=87 success=yes exit=0 a0=6d8360 a1=6ae6b0 a2=37a8f2f4d8 a3=6d8360 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171483607.200:66761): avc:  denied  { read } for  pid=24800 comm="pyzor" name="tmpXD0Ncm" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171483607.200:66761): arch=c000003e syscall=0 success=yes exit=1012 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=29238 pid=24800 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171483607.200:66761):  path=2F746D702F746D705844304E636D202864656C6574656429
>type=USER_ACCT msg=audit(1171483801.119:66762): user pid=24817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483801.120:66763): login pid=24817 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171483801.122:66764): user pid=24818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171483801.122:66765): login pid=24818 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171483801.122:66766): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483801.122:66767): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171483801.132:66768): user pid=24818 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171483801.132:66769): user pid=24818 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171483801.142:66770): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171483801.142:66771): user pid=24817 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171484101.465:66772): user pid=24863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171484101.465:66773): login pid=24863 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171484101.467:66774): user pid=24863 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171484101.468:66775): user pid=24863 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171484401.795:66776): user pid=24907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171484401.795:66777): login pid=24907 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171484401.798:66778): user pid=24908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171484401.798:66779): login pid=24908 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171484401.798:66780): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171484401.798:66781): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171484401.810:66782): user pid=24908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171484401.810:66783): user pid=24908 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171484401.817:66784): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171484401.818:66785): user pid=24907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171484419.170:66786): avc:  denied  { append } for  pid=24924 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171484419.170:66786): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=24921 pid=24924 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171484616.461:66787): avc:  denied  { setattr } for  pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171484616.461:66787): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171484616.462:66788): avc:  denied  { rename } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171484616.462:66788): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171484701.147:66789): user pid=25043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171484701.148:66790): login pid=25043 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171484701.152:66791): user pid=25043 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171484701.152:66792): user pid=25043 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171485001.474:66793): user pid=25080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485001.475:66794): login pid=25080 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171485001.477:66795): user pid=25081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485001.477:66796): login pid=25081 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171485001.478:66797): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485001.479:66798): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171485001.482:66799): user pid=25081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485001.482:66800): user pid=25081 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171485001.497:66801): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171485001.497:66802): user pid=25080 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171485301.814:66803): user pid=25129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485301.814:66804): login pid=25129 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171485301.819:66805): user pid=25129 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485301.819:66806): user pid=25129 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171485601.140:66807): user pid=25171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485601.140:66808): login pid=25171 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171485601.140:66809): user pid=25172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485601.141:66810): login pid=25172 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171485601.146:66811): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485601.146:66812): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171485601.149:66813): user pid=25172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485601.150:66814): user pid=25172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171485601.166:66815): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171485601.166:66816): user pid=25171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171485901.481:66817): user pid=25218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171485901.481:66818): login pid=25218 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171485901.485:66819): user pid=25218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171485901.485:66820): user pid=25218 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171486201.805:66821): user pid=25252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486201.805:66822): login pid=25252 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171486201.807:66823): user pid=25253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486201.808:66824): login pid=25253 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171486201.808:66825): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486201.809:66826): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171486201.820:66827): user pid=25253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486201.820:66828): user pid=25253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171486201.827:66829): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171486201.828:66830): user pid=25252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171486501.140:66831): user pid=25306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486501.140:66832): login pid=25306 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171486501.144:66833): user pid=25306 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486501.144:66834): user pid=25306 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171486505.603:66835): avc:  denied  { search } for  pid=25316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171486505.603:66835): avc:  denied  { write } for  pid=25316 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171486505.603:66835): avc:  denied  { add_name } for  pid=25316 comm="pyzor" name="5deAU1" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171486505.603:66835): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=25316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171486505.603:66836): avc:  denied  { remove_name } for  pid=25316 comm="pyzor" name="5deAU1" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171486505.603:66836): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=25316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171486702.873:66837): user pid=25343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171486702.874:66838): user pid=25343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171486702.875:66839): login pid=25343 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171486702.875:66840): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171486702.885:66841): user pid=25346 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171486702.976:66842): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1171486801.479:66843): user pid=25402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486801.480:66844): login pid=25402 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171486801.482:66845): user pid=25403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486801.482:66846): login pid=25403 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171486801.483:66847): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486801.483:66848): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171486801.492:66849): user pid=25403 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486801.492:66850): user pid=25403 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171486801.511:66851): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171486801.511:66852): user pid=25402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171486861.820:66853): user pid=25418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171486861.820:66854): login pid=25418 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171486861.824:66855): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171486861.824:66856): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171486862.708:66857): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171486862.708:66858): user pid=25418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171487101.716:66859): user pid=25467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171487101.717:66860): login pid=25467 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171487101.721:66861): user pid=25467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171487101.721:66862): user pid=25467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171487306.131:66863): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171487306.132:66864): user pid=25343 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171487401.049:66865): user pid=25514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171487401.049:66866): login pid=25514 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171487401.050:66867): user pid=25513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171487401.050:66868): login pid=25513 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171487401.055:66869): user pid=25514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171487401.055:66870): user pid=25514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171487401.061:66871): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171487401.061:66872): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171487401.082:66873): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171487401.083:66874): user pid=25513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171487433.063:66875): avc:  denied  { append } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487433.063:66875): arch=c000003e syscall=2 success=yes exit=13 a0=32c1660 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171487433.063:66876): avc:  denied  { ioctl } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487433.063:66876): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487433.063:66876):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171487436.619:66877): avc:  denied  { search } for  pid=25537 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171487436.619:66877): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171487436.619:66878): avc:  denied  { getattr } for  pid=25537 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.619:66878): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff1c7176c0 a2=7fff1c7176c0 a3=6c6280 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487436.619:66878):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171487436.620:66879): avc:  denied  { read } for  pid=25537 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.620:66879): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171487436.620:66880): avc:  denied  { create } for  pid=25537 comm="pyzor" name="ucxZEe" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.620:66880): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171487436.620:66881): avc:  denied  { getattr } for  pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.620:66881): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff1c715bb0 a2=7fff1c715bb0 a3=3 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487436.620:66881):  path="/tmp/ucxZEe"
>type=AVC msg=audit(1171487436.621:66882): avc:  denied  { write } for  pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.621:66882): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef157d4 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487436.621:66882):  path="/tmp/ucxZEe"
>type=AVC msg=audit(1171487436.621:66883): avc:  denied  { unlink } for  pid=25537 comm="pyzor" name="ucxZEe" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.621:66883): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171487436.623:66884): avc:  denied  { read } for  pid=25537 comm="pyzor" name="tmphsUWUo" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487436.623:66884): arch=c000003e syscall=0 success=yes exit=815 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8bc4 items=0 ppid=24967 pid=25537 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487436.623:66884):  path=2F746D702F746D7068735557556F202864656C6574656429
>type=AVC msg=audit(1171487441.582:66885): avc:  denied  { signal } for  pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171487441.582:66885): arch=c000003e syscall=62 success=yes exit=0 a0=63c1 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171487441.756:66886): avc:  denied  { link } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.756:66886): arch=c000003e syscall=86 success=yes exit=0 a0=30bde40 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171487441.757:66887): avc:  denied  { unlink } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.757:66887): arch=c000003e syscall=87 success=yes exit=0 a0=30bde40 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171487441.801:66888): avc:  denied  { write } for  pid=25533 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171487441.801:66888): avc:  denied  { add_name } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171487441.801:66888): avc:  denied  { create } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.801:66888): arch=c000003e syscall=2 success=yes exit=6 a0=61c960 a1=c1 a2=124 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171487441.801:66889): avc:  denied  { write } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.801:66889): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487441.801:66889):  path="/home/dhighley/_9OG.Rr30FB.douglas"
>type=AVC msg=audit(1171487441.801:66890): avc:  denied  { getattr } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.801:66890): arch=c000003e syscall=4 success=yes exit=0 a0=61c960 a1=7fff06ed28d0 a2=7fff06ed28d0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171487441.801:66890):  path="/home/dhighley/_9OG.Rr30FB.douglas"
>type=AVC msg=audit(1171487441.801:66891): avc:  denied  { link } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.801:66891): arch=c000003e syscall=86 success=yes exit=0 a0=61c960 a1=61b510 a2=7fff06ed27f0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171487441.802:66892): avc:  denied  { remove_name } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171487441.802:66892): avc:  denied  { unlink } for  pid=25533 comm="procmail" name="_9OG.Rr30FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.802:66892): arch=c000003e syscall=87 success=yes exit=0 a0=61c960 a1=61b510 a2=7fff06ed27f0 a3=61c960 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171487441.802:66893): avc:  denied  { append } for  pid=25533 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171487441.802:66893): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=25530 pid=25533 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171487701.403:66894): user pid=25573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171487701.403:66895): login pid=25573 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171487701.407:66896): user pid=25573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171487701.407:66897): user pid=25573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171488001.742:66898): user pid=25607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488001.742:66899): login pid=25607 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171488001.743:66900): user pid=25608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488001.743:66901): login pid=25608 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171488001.747:66902): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488001.747:66903): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171488001.750:66904): user pid=25608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488001.750:66905): user pid=25608 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171488001.767:66906): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171488001.767:66907): user pid=25607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171488301.086:66908): user pid=25649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488301.086:66909): login pid=25649 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171488301.088:66910): user pid=25649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488301.088:66911): user pid=25649 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171488601.408:66912): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488601.409:66913): login pid=25685 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171488601.411:66914): user pid=25686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488601.411:66915): login pid=25686 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171488601.413:66916): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488601.413:66917): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171488601.419:66918): user pid=25686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488601.419:66919): user pid=25686 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171488601.440:66920): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171488601.440:66921): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171488841.007:66922): avc:  denied  { append } for  pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171488841.007:66922): arch=c000003e syscall=2 success=yes exit=10 a0=3021cc0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171488841.865:66923): avc:  denied  { getattr } for  pid=25723 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171488841.865:66923): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd1b26ad0 a2=7fffd1b26ad0 a3=6c6280 items=0 ppid=24967 pid=25723 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171488841.865:66923):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171488841.865:66924): avc:  denied  { read } for  pid=25723 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171488841.865:66924): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=25723 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171488846.827:66925): avc:  denied  { signal } for  pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171488846.827:66925): arch=c000003e syscall=62 success=yes exit=0 a0=647b a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171488846.901:66926): avc:  denied  { write } for  pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171488846.901:66926): arch=c000003e syscall=2 success=yes exit=10 a0=39cc600 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171488901.746:66927): user pid=25729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171488901.746:66928): login pid=25729 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171488901.750:66929): user pid=25729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171488901.750:66930): user pid=25729 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171489201.077:66931): user pid=25762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171489201.078:66932): login pid=25762 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171489201.080:66933): user pid=25763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171489201.080:66934): login pid=25763 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171489201.080:66935): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171489201.081:66936): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171489201.086:66937): user pid=25763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171489201.087:66938): user pid=25763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171489201.105:66939): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171489201.106:66940): user pid=25762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171489501.411:66941): user pid=25799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171489501.412:66942): login pid=25799 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171489501.415:66943): user pid=25799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171489501.415:66944): user pid=25799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171489614.297:66945): avc:  denied  { append } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489614.297:66945): arch=c000003e syscall=2 success=yes exit=13 a0=3a65f30 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171489614.297:66946): avc:  denied  { ioctl } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489614.297:66946): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171489614.297:66946):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171489620.093:66947): avc:  denied  { link } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489620.093:66947): arch=c000003e syscall=86 success=yes exit=0 a0=32d5510 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171489620.093:66948): avc:  denied  { unlink } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489620.093:66948): arch=c000003e syscall=87 success=yes exit=0 a0=32d5510 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171489801.736:66949): user pid=25842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171489801.736:66950): login pid=25842 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171489801.738:66951): user pid=25843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171489801.738:66952): login pid=25843 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171489801.739:66953): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171489801.739:66954): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171489801.746:66955): user pid=25843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171489801.746:66956): user pid=25843 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171489801.771:66957): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171489801.771:66958): user pid=25842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171489992.639:66959): avc:  denied  { write } for  pid=25872 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171489992.639:66959): avc:  denied  { add_name } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171489992.639:66959): avc:  denied  { create } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489992.639:66959): arch=c000003e syscall=2 success=yes exit=6 a0=61b520 a1=c1 a2=124 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171489992.639:66960): avc:  denied  { write } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489992.639:66960): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171489992.639:66960):  path="/home/dhighley/_QUG.IT40FB.douglas"
>type=AVC msg=audit(1171489992.639:66961): avc:  denied  { getattr } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489992.639:66961): arch=c000003e syscall=4 success=yes exit=0 a0=61b520 a1=7fff8239cd90 a2=7fff8239cd90 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171489992.639:66961):  path="/home/dhighley/_QUG.IT40FB.douglas"
>type=AVC msg=audit(1171489992.639:66962): avc:  denied  { link } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489992.639:66962): arch=c000003e syscall=86 success=yes exit=0 a0=61b520 a1=61d0d0 a2=7fff8239ccb0 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171489992.639:66963): avc:  denied  { remove_name } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171489992.639:66963): avc:  denied  { unlink } for  pid=25872 comm="procmail" name="_QUG.IT40FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171489992.639:66963): arch=c000003e syscall=87 success=yes exit=0 a0=61b520 a1=61d0d0 a2=7fff8239ccb0 a3=61b520 items=0 ppid=25869 pid=25872 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171490101.083:66964): user pid=25896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171490101.083:66965): login pid=25896 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171490101.087:66966): user pid=25896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171490101.087:66967): user pid=25896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171490397.543:66968): user pid=25933 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171490397.544:66969): user pid=25933 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171490397.545:66970): login pid=25933 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171490397.545:66971): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171490397.555:66972): user pid=25936 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171490397.647:66973): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1171490401.408:66974): user pid=25971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171490401.408:66975): login pid=25971 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171490401.408:66976): user pid=25970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171490401.409:66977): login pid=25970 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171490401.414:66978): user pid=25971 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171490401.414:66979): user pid=25971 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171490401.416:66980): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171490401.416:66981): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171490401.447:66982): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171490401.448:66983): user pid=25970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171490461.745:66984): user pid=25991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171490461.746:66985): login pid=25991 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171490461.748:66986): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171490461.748:66987): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171490462.661:66988): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171490462.661:66989): user pid=25991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171490477.948:66990): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171490477.948:66991): user pid=25933 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171490701.667:66992): user pid=26031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171490701.667:66993): login pid=26031 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171490701.671:66994): user pid=26031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171490701.671:66995): user pid=26031 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171491001.007:66996): user pid=26071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491001.008:66997): login pid=26071 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171491001.010:66998): user pid=26072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491001.010:66999): login pid=26072 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171491001.012:67000): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491001.012:67001): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171491001.016:67002): user pid=26072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491001.016:67003): user pid=26072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171491001.032:67004): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171491001.032:67005): user pid=26071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171491187.658:67006): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171491187.659:67007): user pid=24717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171491301.664:67008): user pid=26112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491301.664:67009): login pid=26112 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171491301.668:67010): user pid=26112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491301.668:67011): user pid=26112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171491448.011:67012): avc:  denied  { setattr } for  pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=12485674 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.011:67012): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f58 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491448.012:67013): avc:  denied  { rename } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.012:67013): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491448.872:67014): avc:  denied  { search } for  pid=26148 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171491448.872:67014): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171491448.873:67015): avc:  denied  { getattr } for  pid=26148 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.873:67015): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5fcabc50 a2=7fff5fcabc50 a3=6c6280 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491448.873:67015):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171491448.873:67016): avc:  denied  { read } for  pid=26148 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.873:67016): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171491448.874:67017): avc:  denied  { create } for  pid=26148 comm="pyzor" name="TRnAMi" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.874:67017): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171491448.874:67018): avc:  denied  { getattr } for  pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.874:67018): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5fcaa550 a2=7fff5fcaa550 a3=2 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491448.874:67018):  path="/tmp/TRnAMi"
>type=AVC msg=audit(1171491448.874:67019): avc:  denied  { write } for  pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.874:67019): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491448.874:67019):  path="/tmp/TRnAMi"
>type=AVC msg=audit(1171491448.874:67020): avc:  denied  { unlink } for  pid=26148 comm="pyzor" name="TRnAMi" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.874:67020): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171491448.876:67021): avc:  denied  { read } for  pid=26148 comm="pyzor" name="tmp57pGw-" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491448.876:67021): arch=c000003e syscall=0 success=yes exit=499 a0=4 a1=2aaaaf34d000 a2=1000 a3=61 items=0 ppid=24967 pid=26148 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491448.876:67021):  path=2F746D702F746D7035377047772D202864656C6574656429
>type=AVC msg=audit(1171491453.834:67022): avc:  denied  { signal } for  pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171491453.834:67022): arch=c000003e syscall=62 success=yes exit=0 a0=6624 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491453.936:67023): avc:  denied  { write } for  pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491453.936:67023): arch=c000003e syscall=2 success=yes exit=10 a0=3056dd0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491453.947:67024): avc:  denied  { append } for  pid=26144 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491453.947:67024): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26139 pid=26144 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171491453.947:67025): avc:  denied  { lock } for  pid=26144 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491453.947:67025): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26139 pid=26144 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491453.947:67025):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171491601.990:67026): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491601.991:67027): login pid=26161 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171491601.993:67028): user pid=26162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491601.993:67029): login pid=26162 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171491601.994:67030): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491601.994:67031): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171491602.004:67032): user pid=26162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491602.005:67033): user pid=26162 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171491602.016:67034): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171491602.016:67035): user pid=26161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171491883.412:67036): avc:  denied  { append } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491883.412:67036): arch=c000003e syscall=2 success=yes exit=13 a0=37b6820 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491883.412:67037): avc:  denied  { ioctl } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491883.412:67037): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491883.412:67037):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171491883.419:67038): avc:  denied  { append } for  pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491883.419:67038): arch=c000003e syscall=2 success=yes exit=10 a0=3183480 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491883.985:67039): avc:  denied  { getattr } for  pid=26205 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491883.985:67039): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff9dc83380 a2=7fff9dc83380 a3=6c6280 items=0 ppid=24967 pid=26205 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171491883.985:67039):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171491883.985:67040): avc:  denied  { read } for  pid=26205 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491883.985:67040): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26205 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171491889.015:67041): avc:  denied  { link } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491889.015:67041): arch=c000003e syscall=86 success=yes exit=0 a0=303d910 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171491889.015:67042): avc:  denied  { unlink } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171491889.015:67042): arch=c000003e syscall=87 success=yes exit=0 a0=303d910 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171491901.340:67043): user pid=26209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171491901.340:67044): login pid=26209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171491901.344:67045): user pid=26209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171491901.344:67046): user pid=26209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171492201.665:67047): user pid=26244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171492201.665:67048): login pid=26244 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171492201.665:67049): user pid=26245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171492201.666:67050): login pid=26245 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171492201.667:67051): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171492201.667:67052): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171492201.679:67053): user pid=26245 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171492201.679:67054): user pid=26245 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171492201.687:67055): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171492201.688:67056): user pid=26244 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171492502.000:67057): user pid=26284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171492502.000:67058): login pid=26284 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171492502.004:67059): user pid=26284 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171492502.004:67060): user pid=26284 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171492683.994:67061): avc:  denied  { search } for  pid=26316 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171492683.994:67061): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26316 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171492689.295:67062): avc:  denied  { create } for  pid=26312 comm="procmail" name="_IbG.R940FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.295:67062): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171492689.296:67063): avc:  denied  { write } for  pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.296:67063): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171492689.296:67063):  path="/home/dhighley/_IbG.R940FB.douglas"
>type=AVC msg=audit(1171492689.296:67064): avc:  denied  { getattr } for  pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.296:67064): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff64936330 a2=7fff64936330 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171492689.296:67064):  path="/home/dhighley/_IbG.R940FB.douglas"
>type=AVC msg=audit(1171492689.296:67065): avc:  denied  { link } for  pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.296:67065): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61dda0 a2=7fff64936250 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171492689.296:67066): avc:  denied  { unlink } for  pid=26312 comm="procmail" name="_IbG.R940FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.296:67066): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61dda0 a2=7fff64936250 a3=61b650 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171492689.296:67067): avc:  denied  { append } for  pid=26312 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492689.296:67067): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26309 pid=26312 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171492801.325:67068): user pid=26328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171492801.325:67069): login pid=26328 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171492801.327:67070): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171492801.328:67071): login pid=26329 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171492801.329:67072): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171492801.329:67073): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171492801.332:67074): user pid=26329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171492801.333:67075): user pid=26329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171492801.349:67076): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171492801.350:67077): user pid=26328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171492859.017:67078): avc:  denied  { create } for  pid=26352 comm="pyzor" name="lIU7ls" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492859.017:67078): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171492859.017:67079): avc:  denied  { getattr } for  pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492859.017:67079): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff10c1c4c0 a2=7fff10c1c4c0 a3=2 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171492859.017:67079):  path="/tmp/lIU7ls"
>type=AVC msg=audit(1171492859.018:67080): avc:  denied  { write } for  pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492859.018:67080): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8774 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171492859.018:67080):  path="/tmp/lIU7ls"
>type=AVC msg=audit(1171492859.018:67081): avc:  denied  { unlink } for  pid=26352 comm="pyzor" name="lIU7ls" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492859.018:67081): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171492859.020:67082): avc:  denied  { read } for  pid=26352 comm="pyzor" name="tmp397rzq" dev=dm-0 ino=30703648 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492859.020:67082): arch=c000003e syscall=0 success=yes exit=3395 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=24967 pid=26352 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171492859.020:67082):  path=2F746D702F746D70333937727A71202864656C6574656429
>type=AVC msg=audit(1171492864.201:67083): avc:  denied  { append } for  pid=26348 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171492864.201:67083): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26345 pid=26348 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171493101.662:67084): user pid=26374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171493101.662:67085): login pid=26374 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171493101.665:67086): user pid=26374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171493101.665:67087): user pid=26374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171493401.990:67088): user pid=26409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171493401.990:67089): login pid=26409 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171493401.992:67090): user pid=26408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171493401.992:67091): login pid=26408 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171493401.994:67092): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171493401.994:67093): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171493401.998:67094): user pid=26409 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171493401.998:67095): user pid=26409 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171493402.014:67096): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171493402.014:67097): user pid=26408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171493701.342:67098): user pid=26448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171493701.342:67099): login pid=26448 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171493701.346:67100): user pid=26448 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171493701.346:67101): user pid=26448 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171494001.664:67102): user pid=26482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494001.665:67103): login pid=26482 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171494001.667:67104): user pid=26483 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494001.667:67105): login pid=26483 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171494001.669:67106): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494001.669:67107): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171494001.669:67108): user pid=26484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494001.670:67109): login pid=26484 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171494001.678:67110): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494001.678:67111): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171494001.686:67112): user pid=26484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494001.686:67113): user pid=26484 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171494001.694:67114): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171494001.694:67115): user pid=26482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171494037.433:67116): avc:  denied  { getattr } for  pid=26511 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171494037.433:67116): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffde4a9450 a2=7fffde4a9450 a3=6c6280 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171494037.433:67116):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171494037.433:67117): avc:  denied  { read } for  pid=26511 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171494037.433:67117): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171494037.434:67118): avc:  denied  { search } for  pid=26511 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171494037.434:67118): avc:  denied  { write } for  pid=26511 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171494037.434:67118): avc:  denied  { add_name } for  pid=26511 comm="pyzor" name="_nR1UC" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171494037.434:67118): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171494037.435:67119): avc:  denied  { remove_name } for  pid=26511 comm="pyzor" name="_nR1UC" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171494037.435:67119): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26511 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171494042.481:67120): avc:  denied  { write } for  pid=26507 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171494042.481:67120): avc:  denied  { add_name } for  pid=26507 comm="procmail" name="_LeG.aS50FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171494042.481:67120): arch=c000003e syscall=2 success=yes exit=6 a0=61dbf0 a1=c1 a2=124 a3=61dbf0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171494042.482:67121): avc:  denied  { remove_name } for  pid=26507 comm="procmail" name="_LeG.aS50FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171494042.482:67121): arch=c000003e syscall=87 success=yes exit=0 a0=61dbf0 a1=61b520 a2=7fff92603f20 a3=61dbf0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171494042.482:67122): avc:  denied  { append } for  pid=26507 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171494042.482:67122): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171494042.482:67123): avc:  denied  { lock } for  pid=26507 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171494042.482:67123): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=26502 pid=26507 auid=1000 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171494042.482:67123):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171494061.009:67124): user pid=26514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494061.009:67125): login pid=26514 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171494061.013:67126): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494061.013:67127): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171494061.931:67128): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171494061.931:67129): user pid=26514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171494301.940:67130): user pid=26551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494301.940:67131): login pid=26551 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171494301.945:67132): user pid=26551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494301.945:67133): user pid=26551 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171494601.268:67134): user pid=26589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494601.268:67135): login pid=26589 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171494601.270:67136): user pid=26588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494601.270:67137): login pid=26588 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171494601.272:67138): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494601.273:67139): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171494601.277:67140): user pid=26589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494601.277:67141): user pid=26589 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171494601.292:67142): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171494601.292:67143): user pid=26588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171494783.235:67144): user pid=26617 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171494783.237:67145): user pid=26617 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171494783.238:67146): login pid=26617 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171494783.238:67147): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171494783.248:67148): user pid=26620 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171494783.339:67149): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/0 res=success)'
>type=CRED_DISP msg=audit(1171494853.952:67150): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171494853.952:67151): user pid=26617 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171494901.599:67152): user pid=26672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171494901.599:67153): login pid=26672 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171494901.602:67154): user pid=26672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171494901.603:67155): user pid=26672 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171495201.925:67156): user pid=26708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171495201.926:67157): login pid=26708 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171495201.927:67158): user pid=26709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171495201.927:67159): login pid=26709 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171495201.929:67160): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171495201.929:67161): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171495201.938:67162): user pid=26709 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171495201.938:67163): user pid=26709 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171495201.948:67164): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171495201.948:67165): user pid=26708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171495501.267:67166): user pid=26745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171495501.267:67167): login pid=26745 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171495501.271:67168): user pid=26745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171495501.271:67169): user pid=26745 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171495801.598:67170): user pid=26780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171495801.599:67171): login pid=26780 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171495801.601:67172): user pid=26781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171495801.601:67173): login pid=26781 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171495801.605:67174): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171495801.605:67175): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171495801.607:67176): user pid=26781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171495801.607:67177): user pid=26781 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171495801.633:67178): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171495801.634:67179): user pid=26780 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171496101.939:67180): user pid=26817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171496101.939:67181): login pid=26817 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171496101.943:67182): user pid=26817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171496101.944:67183): user pid=26817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171496283.618:67184): avc:  denied  { append } for  pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496283.618:67184): arch=c000003e syscall=2 success=yes exit=10 a0=30a6010 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171496284.369:67185): avc:  denied  { search } for  pid=26847 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171496284.369:67185): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171496284.369:67186): avc:  denied  { getattr } for  pid=26847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.369:67186): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff5b994940 a2=7fff5b994940 a3=6c6280 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496284.369:67186):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171496284.369:67187): avc:  denied  { read } for  pid=26847 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.369:67187): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171496284.370:67188): avc:  denied  { search } for  pid=26847 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171496284.370:67188): avc:  denied  { write } for  pid=26847 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171496284.370:67188): avc:  denied  { add_name } for  pid=26847 comm="pyzor" name="rEU9dr" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171496284.370:67188): avc:  denied  { create } for  pid=26847 comm="pyzor" name="rEU9dr" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.370:67188): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171496284.370:67189): avc:  denied  { getattr } for  pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.370:67189): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5b992e30 a2=7fff5b992e30 a3=3 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496284.370:67189):  path="/tmp/rEU9dr"
>type=AVC msg=audit(1171496284.370:67190): avc:  denied  { write } for  pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.370:67190): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15744 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496284.370:67190):  path="/tmp/rEU9dr"
>type=AVC msg=audit(1171496284.370:67191): avc:  denied  { remove_name } for  pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171496284.370:67191): avc:  denied  { unlink } for  pid=26847 comm="pyzor" name="rEU9dr" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.370:67191): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171496284.371:67192): avc:  denied  { read } for  pid=26847 comm="pyzor" name="tmpDHy6OZ" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496284.371:67192): arch=c000003e syscall=0 success=yes exit=653 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=24967 pid=26847 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496284.371:67192):  path=2F746D702F746D70444879364F5A202864656C6574656429
>type=AVC msg=audit(1171496289.329:67193): avc:  denied  { signal } for  pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171496289.329:67193): arch=c000003e syscall=62 success=yes exit=0 a0=68df a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171496289.343:67194): avc:  denied  { write } for  pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.343:67194): arch=c000003e syscall=2 success=yes exit=10 a0=3078270 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171496289.363:67195): avc:  denied  { create } for  pid=26843 comm="procmail" name="_bjG.h150FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.363:67195): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171496289.363:67196): avc:  denied  { write } for  pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.363:67196): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496289.363:67196):  path="/home/dhighley/_bjG.h150FB.douglas"
>type=AVC msg=audit(1171496289.364:67197): avc:  denied  { getattr } for  pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.364:67197): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff86d0f700 a2=7fff86d0f700 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171496289.364:67197):  path="/home/dhighley/_bjG.h150FB.douglas"
>type=AVC msg=audit(1171496289.364:67198): avc:  denied  { link } for  pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.364:67198): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61cf40 a2=7fff86d0f620 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171496289.364:67199): avc:  denied  { unlink } for  pid=26843 comm="procmail" name="_bjG.h150FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.364:67199): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61cf40 a2=7fff86d0f620 a3=61b5c0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171496289.364:67200): avc:  denied  { append } for  pid=26843 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171496289.364:67200): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=26840 pid=26843 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171496401.268:67201): user pid=26859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171496401.268:67202): user pid=26860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171496401.268:67203): login pid=26859 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171496401.268:67204): login pid=26860 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171496401.275:67205): user pid=26860 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171496401.275:67206): user pid=26860 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171496401.277:67207): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171496401.277:67208): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171496401.305:67209): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171496401.306:67210): user pid=26859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171496651.801:67211): avc:  denied  { signal } for  pid=24967 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171496651.801:67211): arch=c000003e syscall=62 success=yes exit=0 a0=6914 a1=f a2=54 a3=0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171496701.602:67212): user pid=26905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171496701.602:67213): login pid=26905 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171496701.606:67214): user pid=26905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171496701.606:67215): user pid=26905 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171497001.928:67216): user pid=26939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497001.929:67217): login pid=26939 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171497001.931:67218): user pid=26940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497001.931:67219): login pid=26940 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171497001.933:67220): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497001.933:67221): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171497001.943:67222): user pid=26940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497001.943:67223): user pid=26940 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171497001.956:67224): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171497001.957:67225): user pid=26939 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171497022.766:67226): avc:  denied  { append } for  pid=24967 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171497022.766:67226): arch=c000003e syscall=2 success=yes exit=10 a0=3037110 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171497023.352:67227): avc:  denied  { getattr } for  pid=26963 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171497023.352:67227): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb35f95a0 a2=7fffb35f95a0 a3=6c6280 items=0 ppid=24967 pid=26963 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171497023.352:67227):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171497023.352:67228): avc:  denied  { read } for  pid=26963 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171497023.352:67228): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=26963 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171497030.430:67229): avc:  denied  { write } for  pid=24967 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171497030.430:67229): arch=c000003e syscall=2 success=yes exit=10 a0=37ab6b0 a1=2 a2=0 a3=180 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171497301.273:67230): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497301.274:67231): login pid=26984 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171497301.278:67232): user pid=26984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497301.278:67233): user pid=26984 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171497601.604:67234): user pid=27021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497601.604:67235): login pid=27021 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171497601.605:67236): user pid=27022 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497601.605:67237): login pid=27022 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171497601.610:67238): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497601.610:67239): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171497601.614:67240): user pid=27022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497601.614:67241): user pid=27022 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171497601.635:67242): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171497601.635:67243): user pid=27021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171497661.943:67244): user pid=27037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497661.944:67245): login pid=27037 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171497661.947:67246): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497661.948:67247): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171497662.832:67248): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171497662.832:67249): user pid=27037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171497901.840:67250): user pid=27072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171497901.840:67251): login pid=27072 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171497901.844:67252): user pid=27072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171497901.844:67253): user pid=27072 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171498201.164:67254): user pid=27106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171498201.164:67255): login pid=27106 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171498201.166:67256): user pid=27107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171498201.166:67257): login pid=27107 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171498201.167:67258): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171498201.167:67259): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171498201.174:67260): user pid=27107 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171498201.174:67261): user pid=27107 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171498201.184:67262): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171498201.184:67263): user pid=27106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171498501.511:67264): user pid=27143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171498501.511:67265): login pid=27143 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171498501.515:67266): user pid=27143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171498501.515:67267): user pid=27143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171498801.843:67268): user pid=27176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171498801.843:67269): login pid=27176 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171498801.844:67270): user pid=27177 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171498801.844:67271): login pid=27177 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171498801.849:67272): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171498801.849:67273): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171498801.852:67274): user pid=27177 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171498801.853:67275): user pid=27177 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171498801.870:67276): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171498801.870:67277): user pid=27176 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171499101.183:67278): user pid=27211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171499101.183:67279): login pid=27211 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171499101.187:67280): user pid=27211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171499101.187:67281): user pid=27211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171499401.514:67282): user pid=27246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171499401.514:67283): login pid=27246 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171499401.514:67284): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171499401.514:67285): login pid=27245 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171499401.519:67286): user pid=27246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171499401.520:67287): user pid=27246 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171499401.523:67288): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171499401.523:67289): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171499401.547:67290): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171499401.548:67291): user pid=27245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171499701.844:67292): user pid=27282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171499701.844:67293): login pid=27282 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171499701.848:67294): user pid=27282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171499701.848:67295): user pid=27282 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171500001.169:67296): user pid=27316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500001.169:67297): login pid=27316 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171500001.170:67298): user pid=27315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500001.170:67299): login pid=27315 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171500001.176:67300): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500001.176:67301): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171500001.179:67302): user pid=27316 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500001.179:67303): user pid=27316 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171500001.199:67304): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171500001.199:67305): user pid=27315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171500301.516:67306): user pid=27353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500301.516:67307): login pid=27353 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171500301.519:67308): user pid=27353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500301.519:67309): user pid=27353 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171500382.406:67310): avc:  denied  { append } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500382.406:67310): arch=c000003e syscall=2 success=yes exit=13 a0=38c7e80 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171500382.406:67311): avc:  denied  { ioctl } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500382.406:67311): arch=c000003e syscall=16 success=no exit=-25 a0=d a1=5401 a2=7fff1cb88bd0 a3=37a0af33d0 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171500382.406:67311):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171500388.277:67312): avc:  denied  { link } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.277:67312): arch=c000003e syscall=86 success=yes exit=0 a0=30fc890 a1=2dc2820 a2=37a0b14937 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171500388.277:67313): avc:  denied  { unlink } for  pid=24967 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.24967" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.277:67313): arch=c000003e syscall=87 success=yes exit=0 a0=30fc890 a1=1cb9800 a2=37a0b12b60 a3=5 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171500388.315:67314): avc:  denied  { write } for  pid=27375 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171500388.315:67314): avc:  denied  { add_name } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171500388.315:67314): avc:  denied  { create } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.315:67314): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171500388.315:67315): avc:  denied  { write } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.315:67315): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171500388.315:67315):  path="/home/dhighley/_vrG.k160FB.douglas"
>type=AVC msg=audit(1171500388.316:67316): avc:  denied  { getattr } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.316:67316): arch=c000003e syscall=4 success=yes exit=0 a0=61ca20 a1=7fffbd2acca0 a2=7fffbd2acca0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171500388.316:67316):  path="/home/dhighley/_vrG.k160FB.douglas"
>type=AVC msg=audit(1171500388.316:67317): avc:  denied  { link } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.316:67317): arch=c000003e syscall=86 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fffbd2acbc0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171500388.316:67318): avc:  denied  { remove_name } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171500388.316:67318): avc:  denied  { unlink } for  pid=27375 comm="procmail" name="_vrG.k160FB.douglas" dev=dm-0 ino=12485674 scontext=user_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171500388.316:67318): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b520 a2=7fffbd2acbc0 a3=61ca20 items=0 ppid=27372 pid=27375 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=user_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171500601.843:67319): user pid=27397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500601.843:67320): login pid=27397 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171500601.845:67321): user pid=27398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500601.846:67322): login pid=27398 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171500601.848:67323): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500601.848:67324): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171500601.858:67325): user pid=27398 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500601.858:67326): user pid=27398 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171500601.870:67327): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171500601.870:67328): user pid=27397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171500901.190:67329): user pid=27433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171500901.190:67330): login pid=27433 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171500901.195:67331): user pid=27433 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171500901.195:67332): user pid=27433 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171501201.513:67333): user pid=27467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501201.513:67334): login pid=27467 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171501201.514:67335): user pid=27466 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501201.514:67336): login pid=27466 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171501201.519:67337): user pid=27467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501201.519:67338): user pid=27467 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171501201.524:67339): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501201.524:67340): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171501201.546:67341): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171501201.546:67342): user pid=27466 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171501261.837:67343): user pid=27491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501261.838:67344): login pid=27491 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171501261.841:67345): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501261.842:67346): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171501262.753:67347): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171501262.753:67348): user pid=27491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171501501.760:67349): user pid=27537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501501.761:67350): login pid=27537 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171501501.764:67351): user pid=27537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501501.764:67352): user pid=27537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171501801.082:67353): user pid=27572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501801.083:67354): login pid=27572 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171501801.085:67355): user pid=27573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171501801.085:67356): login pid=27573 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171501801.086:67357): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501801.086:67358): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171501801.089:67359): user pid=27573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171501801.089:67360): user pid=27573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171501801.105:67361): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171501801.105:67362): user pid=27572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171501989.939:67363): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171501989.939:67364): user pid=26483 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171502101.946:67365): user pid=27609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171502101.946:67366): login pid=27609 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171502101.950:67367): user pid=27609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171502101.950:67368): user pid=27609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171502401.271:67369): user pid=27641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171502401.271:67370): login pid=27641 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171502401.273:67371): user pid=27642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171502401.274:67372): login pid=27642 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171502401.277:67373): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171502401.277:67374): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171502401.279:67375): user pid=27642 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171502401.279:67376): user pid=27642 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171502401.299:67377): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171502401.300:67378): user pid=27641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171502701.604:67379): user pid=27676 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171502701.604:67380): login pid=27676 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171502701.607:67381): user pid=27676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171502701.607:67382): user pid=27676 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171503001.927:67383): user pid=27710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503001.927:67384): login pid=27710 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171503001.929:67385): user pid=27711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503001.929:67386): login pid=27711 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171503001.931:67387): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503001.931:67388): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171503001.943:67389): user pid=27711 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503001.943:67390): user pid=27711 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171503001.950:67391): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171503001.950:67392): user pid=27710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171503301.272:67393): user pid=27747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503301.272:67394): login pid=27747 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171503301.275:67395): user pid=27747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503301.275:67396): user pid=27747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171503601.605:67397): user pid=27781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503601.605:67398): login pid=27781 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171503601.607:67399): user pid=27782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503601.607:67400): login pid=27782 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171503601.608:67401): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503601.608:67402): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171503601.619:67403): user pid=27782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503601.619:67404): user pid=27782 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171503601.626:67405): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171503601.627:67406): user pid=27781 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171503901.947:67407): user pid=27817 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171503901.948:67408): login pid=27817 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171503901.950:67409): user pid=27817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171503901.950:67410): user pid=27817 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171504201.269:67411): user pid=27852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504201.269:67412): login pid=27852 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171504201.270:67413): user pid=27851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504201.270:67414): login pid=27851 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171504201.273:67415): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504201.273:67416): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171504201.275:67417): user pid=27852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504201.275:67418): user pid=27852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171504201.290:67419): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171504201.290:67420): user pid=27851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171504501.600:67421): user pid=27888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504501.600:67422): login pid=27888 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171504501.604:67423): user pid=27888 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504501.604:67424): user pid=27888 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171504801.936:67425): user pid=27943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504801.937:67426): login pid=27943 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171504801.939:67427): user pid=27944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504801.939:67428): login pid=27944 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171504801.941:67429): user pid=27945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171504801.941:67430): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504801.941:67431): login pid=27945 uid=0 old auid=4294967295 new auid=111
>type=CRED_ACQ msg=audit(1171504801.941:67432): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171504801.951:67433): user pid=27944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504801.951:67434): user pid=27944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171504801.952:67435): user pid=27945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504801.952:67436): user pid=27945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171504801.970:67437): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171504801.970:67438): user pid=27943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171504861.278:67439): user pid=27967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171504861.278:67440): login pid=27967 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171504861.281:67441): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171504861.282:67442): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171504862.166:67443): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171504862.166:67444): user pid=27967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171505101.173:67445): user pid=28016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171505101.174:67446): login pid=28016 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171505101.178:67447): user pid=28016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171505101.178:67448): user pid=28016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171505401.502:67449): user pid=28052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171505401.502:67450): login pid=28052 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171505401.503:67451): user pid=28051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171505401.503:67452): login pid=28051 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171505401.506:67453): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171505401.506:67454): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171505401.508:67455): user pid=28052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171505401.508:67456): user pid=28052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171505401.529:67457): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171505401.529:67458): user pid=28051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171505701.841:67459): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171505701.841:67460): login pid=28093 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171505701.845:67461): user pid=28093 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171505701.845:67462): user pid=28093 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171506001.165:67463): user pid=28127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506001.165:67464): login pid=28127 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171506001.167:67465): user pid=28128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506001.167:67466): login pid=28128 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171506001.173:67467): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506001.173:67468): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171506001.176:67469): user pid=28128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506001.176:67470): user pid=28128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171506001.203:67471): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171506001.204:67472): user pid=28127 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171506195.454:67473): avc:  denied  { setattr } for  pid=24967 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634241 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506195.454:67473): arch=c000003e syscall=132 success=yes exit=0 a0=2daa1e0 a1=7fff1cb88fe0 a2=37a0b12b60 a3=1f31f60 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171506195.454:67474): avc:  denied  { rename } for  pid=24967 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506195.454:67474): arch=c000003e syscall=82 success=yes exit=0 a0=304a530 a1=3060880 a2=37a0b1227e a3=8 items=0 ppid=15572 pid=24967 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171506202.893:67475): avc:  denied  { search } for  pid=28161 comm="pyzor" name="/" dev=autofs ino=10961 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171506202.893:67475): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=24967 pid=28161 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171506301.514:67476): user pid=28172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506301.514:67477): login pid=28172 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171506301.518:67478): user pid=28172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506301.519:67479): user pid=28172 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171506479.924:67480): avc:  denied  { create } for  pid=28204 comm="pyzor" name="CEhwAn" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506479.924:67480): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171506479.924:67481): avc:  denied  { getattr } for  pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506479.924:67481): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3ee2c2c0 a2=7fff3ee2c2c0 a3=3 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171506479.924:67481):  path="/tmp/CEhwAn"
>type=AVC msg=audit(1171506479.924:67482): avc:  denied  { write } for  pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506479.924:67482): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15774 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171506479.924:67482):  path="/tmp/CEhwAn"
>type=AVC msg=audit(1171506479.924:67483): avc:  denied  { unlink } for  pid=28204 comm="pyzor" name="CEhwAn" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506479.924:67483): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171506479.925:67484): avc:  denied  { read } for  pid=28204 comm="pyzor" name="tmp60T7DL" dev=dm-0 ino=30703646 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171506479.925:67484): arch=c000003e syscall=0 success=yes exit=1264 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0d8e94 items=0 ppid=24967 pid=28204 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171506479.925:67484):  path=2F746D702F746D7036305437444C202864656C6574656429
>type=USER_ACCT msg=audit(1171506601.837:67485): user pid=28218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506601.837:67486): login pid=28218 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171506601.839:67487): user pid=28219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506601.840:67488): login pid=28219 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171506601.840:67489): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506601.840:67490): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171506601.847:67491): user pid=28219 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506601.847:67492): user pid=28219 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171506601.859:67493): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171506601.859:67494): user pid=28218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171506901.187:67495): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171506901.187:67496): login pid=28264 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171506901.191:67497): user pid=28264 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171506901.191:67498): user pid=28264 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171507201.516:67499): user pid=28297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171507201.517:67500): login pid=28297 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171507201.517:67501): user pid=28298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171507201.517:67502): login pid=28298 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171507201.522:67503): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171507201.522:67504): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171507201.523:67505): user pid=28298 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171507201.523:67506): user pid=28298 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171507201.547:67507): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171507201.547:67508): user pid=28297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171507501.853:67509): user pid=28335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171507501.853:67510): login pid=28335 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171507501.857:67511): user pid=28335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171507501.857:67512): user pid=28335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171507801.179:67513): user pid=28367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171507801.180:67514): login pid=28367 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171507801.180:67515): user pid=28368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171507801.180:67516): login pid=28368 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171507801.185:67517): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171507801.185:67518): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171507801.189:67519): user pid=28368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171507801.189:67520): user pid=28368 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171507801.205:67521): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171507801.205:67522): user pid=28367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171508101.524:67523): user pid=28401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171508101.525:67524): login pid=28401 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171508101.528:67525): user pid=28401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171508101.529:67526): user pid=28401 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171508366.750:67527): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171508366.750:67528): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171508376.046:67529): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171508376.047:67530): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171508376.056:67531): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171508376.063:67532): login pid=30241 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171508376.073:67533): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171508376.074:67534): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171508401.369:67535): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171508401.369:67536): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171508401.380:67537): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171508401.380:67538): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171508401.854:67539): user pid=28693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171508401.854:67540): user pid=28694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171508401.854:67541): login pid=28693 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171508401.854:67542): login pid=28694 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171508401.860:67543): user pid=28694 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171508401.860:67544): user pid=28694 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171508401.865:67545): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171508401.865:67546): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171508401.889:67547): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171508401.889:67548): user pid=28693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171508413.607:67549): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171508413.607:67550): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171508413.616:67551): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171508413.616:67552): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1171508449.329:67553): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171508449.329:67554): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171508449.337:67555): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171508449.338:67556): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171508461.197:67557): user pid=28849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171508461.197:67558): login pid=28849 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171508461.201:67559): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171508461.201:67560): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171508462.104:67561): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171508462.105:67562): user pid=28849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171508473.237:67563): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171508473.237:67564): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1171508473.245:67565): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1171508473.246:67566): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171508701.115:67567): user pid=28959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171508701.115:67568): login pid=28959 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171508701.120:67569): user pid=28959 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171508701.120:67570): user pid=28959 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171509001.465:67571): user pid=29000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171509001.466:67572): login pid=29000 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171509001.467:67573): user pid=29001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171509001.467:67574): login pid=29001 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171509001.469:67575): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171509001.469:67576): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171509001.480:67577): user pid=29001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171509001.480:67578): user pid=29001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171509001.493:67579): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171509001.493:67580): user pid=29000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171509261.328:67581): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171509261.329:67582): user pid=30241 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171509261.371:67583): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171509261.372:67584): user pid=28653 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171509261.373:67585): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1171509261.373:67586): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171509261.374:67587): user pid=28736 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171509261.375:67588): user pid=28808 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1171509261.375:67589): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1171509261.375:67590): user pid=28891 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1171509283.058:67591): bool=allow_ypbind val=0 old_val=1 auid=4294967295
>type=SYSCALL msg=audit(1171509283.058:67591): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffff01faab0 a2=2 a3=3 items=0 ppid=29654 pid=29665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.798:67592): avc:  denied  { search } for  pid=29667 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir
>type=AVC msg=audit(1171509283.798:67592): avc:  denied  { read } for  pid=29667 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970471 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509283.798:67592): arch=c000003e syscall=2 success=yes exit=5 a0=7fffbbefdcc0 a1=0 a2=29 a3=0 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.798:67593): avc:  denied  { name_bind } for  pid=29667 comm="genhomedircon" src=1011 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171509283.798:67593): avc:  denied  { node_bind } for  pid=29667 comm="genhomedircon" src=1011 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171509283.798:67593): avc:  denied  { net_bind_service } for  pid=29667 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability
>type=SYSCALL msg=audit(1171509283.798:67593): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fffbbefdb40 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.798:67594): avc:  denied  { node_bind } for  pid=29667 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171509283.798:67594): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffbbefdc20 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.798:67595): avc:  denied  { name_connect } for  pid=29667 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171509283.798:67595): avc:  denied  { send_msg } for  pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=56184 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171509283.798:67595): avc:  denied  { recv_msg } for  pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=56184 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171509283.798:67595): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffbbefddf0 a2=10 a3=3 items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.799:67596): avc:  denied  { name_bind } for  pid=29667 comm="genhomedircon" src=1012 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171509283.799:67596): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffbbefdc90 a2=10 a3=7fffbbefdb1c items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171509283.799:67597): avc:  denied  { name_connect } for  pid=29667 comm="genhomedircon" dest=857 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171509283.799:67597): avc:  denied  { send_msg } for  pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=1012 daddr=10.2.2.7 dest=857 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171509283.799:67597): avc:  denied  { recv_msg } for  pid=29667 comm="genhomedircon" saddr=10.2.2.7 src=857 daddr=10.2.2.7 dest=1012 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171509283.799:67597): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffbbefddf0 a2=10 a3=7fffbbefdb1c items=0 ppid=29665 pid=29667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=DAEMON_END msg=audit(1171509284.786:93) auditd normal halt, sending auid=4294967295 pid=29795 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1171509373.031:4699) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2562 res=success, auditd pid=2562
>type=CONFIG_CHANGE msg=audit(1171509373.131:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1171509373.152:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=MAC_CONFIG_CHANGE msg=audit(1171509374.950:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295
>type=SYSCALL msg=audit(1171509374.950:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffde0df9a0 a2=2 a3=3 items=0 ppid=2818 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1171509376.877:7): user pid=2907 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1171509376.905:8): user pid=2907 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=USER_START msg=audit(1171509379.086:9): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171509379.086:10): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171509379.555:11): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171509379.555:12): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171509380.819:13): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171509380.819:14): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171509380.911:15): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171509380.912:16): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1171509382.921:17): avc:  denied  { search } for  pid=3303 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171509382.921:17): avc:  denied  { write } for  pid=3303 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171509382.921:17): avc:  denied  { add_name } for  pid=3303 comm="pyzor" name="L1ICHK" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171509382.921:17): avc:  denied  { create } for  pid=3303 comm="pyzor" name="L1ICHK" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509382.921:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171509382.922:18): avc:  denied  { getattr } for  pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509382.922:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe3b17320 a2=7fffe3b17320 a3=2 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171509382.922:18):  path="/tmp/L1ICHK"
>type=AVC msg=audit(1171509382.922:19): avc:  denied  { write } for  pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509382.922:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaeeff1a4 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171509382.922:19):  path="/tmp/L1ICHK"
>type=AVC msg=audit(1171509382.922:20): avc:  denied  { remove_name } for  pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171509382.922:20): avc:  denied  { unlink } for  pid=3303 comm="pyzor" name="L1ICHK" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509382.922:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171509382.923:21): avc:  denied  { read } for  pid=3303 comm="pyzor" name="tmpKYLnt0" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171509382.923:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3190 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171509382.923:21):  path=2F746D702F746D704B594C6E7430202864656C6574656429
>type=AVC msg=audit(1171509387.708:22): avc:  denied  { signal } for  pid=3190 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171509387.708:22): arch=c000003e syscall=62 success=yes exit=0 a0=ce7 a1=f a2=54 a3=0 items=0 ppid=1 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ERR msg=audit(1171509396.957:23): user pid=3604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1171509425.457:24): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171509425.458:25): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171509425.461:26): user pid=3704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171509425.463:27): login pid=3704 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171509425.472:28): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171509425.473:29): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171509465.474:30): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171509465.475:31): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1171509465.509:32): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1171509465.509:33): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1171509479.280:34): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171509479.280:35): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171509479.356:36): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171509479.356:37): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1171509495.717:38): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171509495.717:39): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171509495.725:40): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171509495.725:41): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1171509514.546:42): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171509514.547:43): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1171509514.556:44): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1171509514.556:45): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171509601.144:46): user pid=4211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171509601.145:47): user pid=4210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171509601.145:48): login pid=4211 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171509601.145:49): login pid=4210 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171509601.150:50): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171509601.150:51): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171509601.151:52): user pid=4211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171509601.151:53): user pid=4211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171509601.186:54): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171509601.187:55): user pid=4210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171509901.817:56): user pid=5119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171509901.818:57): login pid=5119 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171509901.822:58): user pid=5119 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171509901.822:59): user pid=5119 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171509932.192:60): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171509932.193:61): user pid=4052 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1171509936.931:62): user pid=5163 uid=0 auid=1000 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=xttpd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/3 res=failed)'
>type=CRED_DISP msg=audit(1171509976.855:63): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1171509976.857:64): user pid=4014 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1171510152.767:65): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171510152.768:66): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171510152.819:67): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171510201.305:68): user pid=5309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171510201.305:69): user pid=5310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171510201.306:70): login pid=5309 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171510201.306:71): login pid=5310 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171510201.311:72): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171510201.311:73): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171510201.313:74): user pid=5310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171510201.313:75): user pid=5310 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171510201.344:76): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171510201.344:77): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171510288.466:78): user pid=5298 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171510501.672:79): user pid=5356 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171510501.672:80): login pid=5356 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171510501.676:81): user pid=5356 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171510501.676:82): user pid=5356 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171510801.013:83): user pid=5391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171510801.013:84): login pid=5391 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171510801.015:85): user pid=5392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171510801.015:86): login pid=5392 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171510801.017:87): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171510801.017:88): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171510801.021:89): user pid=5392 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171510801.021:90): user pid=5392 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171510801.034:91): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171510801.034:92): user pid=5391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171511101.365:93): user pid=5434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171511101.366:94): login pid=5434 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171511101.370:95): user pid=5434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171511101.370:96): user pid=5434 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171511145.382:97): user pid=5484 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171511145.382:98): user pid=5484 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171511259.725:99): user pid=5581 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171511259.725:100): user pid=5581 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171511317.092:101): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171511317.092:102): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171511317.101:103): avc:  denied  { lock } for  pid=5613 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511317.101:103): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffffe9a4e00 a3=0 items=0 ppid=3121 pid=5613 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171511317.101:103):  path="/home/dhighley/Mail/Trash"
>type=CRED_DISP msg=audit(1171511378.460:104): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1171511378.461:105): user pid=4163 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171511401.695:106): user pid=5627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171511401.696:107): login pid=5627 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171511401.698:108): user pid=5628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171511401.698:109): login pid=5628 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171511401.702:110): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171511401.702:111): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171511401.705:112): user pid=5628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171511401.705:113): user pid=5628 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171511401.733:114): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171511401.733:115): user pid=5627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171511431.003:116): user pid=5676 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171511431.003:117): user pid=5676 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171511445.722:118): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171511445.722:119): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=CRED_DISP msg=audit(1171511692.752:120): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171511692.752:121): user pid=4094 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171511701.054:122): user pid=5727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171511701.054:123): login pid=5727 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171511701.058:124): user pid=5727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171511701.058:125): user pid=5727 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171511707.454:126): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171511707.455:127): user pid=3704 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1171511738.509:128): bool=allow_ypbind val=0 old_val=1 auid=4294967295
>type=SYSCALL msg=audit(1171511738.509:128): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff5bc03030 a2=2 a3=3 items=0 ppid=6413 pid=6424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.984:129): avc:  denied  { search } for  pid=6426 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir
>type=AVC msg=audit(1171511738.984:129): avc:  denied  { read } for  pid=6426 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970466 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511738.984:129): arch=c000003e syscall=2 success=yes exit=5 a0=7fffb1c089d0 a1=0 a2=29 a3=0 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.984:130): avc:  denied  { name_bind } for  pid=6426 comm="genhomedircon" src=666 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171511738.984:130): avc:  denied  { node_bind } for  pid=6426 comm="genhomedircon" src=666 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171511738.984:130): avc:  denied  { net_bind_service } for  pid=6426 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability
>type=SYSCALL msg=audit(1171511738.984:130): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fffb1c08850 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.984:131): avc:  denied  { node_bind } for  pid=6426 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511738.984:131): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffb1c08930 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.985:132): avc:  denied  { name_connect } for  pid=6426 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511738.985:132): avc:  denied  { send_msg } for  pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=32867 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511738.985:132): avc:  denied  { recv_msg } for  pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=32867 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511738.985:132): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffb1c08b00 a2=10 a3=3 items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.985:133): avc:  denied  { name_bind } for  pid=6426 comm="genhomedircon" src=667 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511738.985:133): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fffb1c089a0 a2=10 a3=7fffb1c0882c items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511738.985:134): avc:  denied  { name_connect } for  pid=6426 comm="genhomedircon" dest=875 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511738.985:134): avc:  denied  { send_msg } for  pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=667 daddr=10.2.2.7 dest=875 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511738.985:134): avc:  denied  { recv_msg } for  pid=6426 comm="genhomedircon" saddr=10.2.2.7 src=875 daddr=10.2.2.7 dest=667 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511738.985:134): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fffb1c08b00 a2=10 a3=7fffb1c0882c items=0 ppid=6424 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=DAEMON_END msg=audit(1171511739.875:4700) auditd normal halt, sending auid=4294967295 pid=6554 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2562
>type=DAEMON_START msg=audit(1171511813.756:7471) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2414 res=success, auditd pid=2414
>type=CONFIG_CHANGE msg=audit(1171511813.856:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1171511813.876:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=MAC_CONFIG_CHANGE msg=audit(1171511815.560:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295
>type=SYSCALL msg=audit(1171511815.560:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffdcf71830 a2=2 a3=3 items=0 ppid=2670 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1171511817.512:7): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1171511817.545:8): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=USER_START msg=audit(1171511819.712:9): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171511819.712:10): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171511820.160:11): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171511820.161:12): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171511821.431:13): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171511821.431:14): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171511821.515:15): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171511821.516:16): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1171511823.475:17): avc:  denied  { search } for  pid=3154 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171511823.475:17): avc:  denied  { write } for  pid=3154 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171511823.475:17): avc:  denied  { add_name } for  pid=3154 comm="pyzor" name="AsFy-T" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171511823.475:17): avc:  denied  { create } for  pid=3154 comm="pyzor" name="AsFy-T" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511823.475:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171511823.475:18): avc:  denied  { getattr } for  pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511823.475:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff161be20 a2=7ffff161be20 a3=2 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171511823.475:18):  path="/tmp/AsFy-T"
>type=AVC msg=audit(1171511823.475:19): avc:  denied  { write } for  pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511823.475:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cffb4 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171511823.475:19):  path="/tmp/AsFy-T"
>type=AVC msg=audit(1171511823.475:20): avc:  denied  { remove_name } for  pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171511823.475:20): avc:  denied  { unlink } for  pid=3154 comm="pyzor" name="AsFy-T" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511823.475:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171511823.477:21): avc:  denied  { read } for  pid=3154 comm="pyzor" name="tmpTnFKzW" dev=dm-0 ino=30703626 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511823.477:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3042 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171511823.477:21):  path=2F746D702F746D70546E464B7A57202864656C6574656429
>type=AVC msg=audit(1171511828.317:22): avc:  denied  { signal } for  pid=3042 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171511828.317:22): arch=c000003e syscall=62 success=yes exit=0 a0=c52 a1=f a2=54 a3=0 items=0 ppid=1 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ERR msg=audit(1171511836.304:23): user pid=3455 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1171511847.543:24): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171511847.544:25): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171511847.547:26): user pid=3545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171511847.548:27): login pid=3545 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171511847.557:28): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171511847.558:29): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171511885.353:30): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171511885.353:31): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171511885.392:32): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171511885.392:33): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1171511949.414:34): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171511949.414:35): user pid=3819 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171511956.797:36): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171511956.798:37): user pid=3545 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1171511993.537:38): bool=allow_ypbind val=0 old_val=1 auid=4294967295
>type=SYSCALL msg=audit(1171511993.537:38): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff249f92b0 a2=2 a3=3 items=0 ppid=5617 pid=5628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.781:39): avc:  denied  { search } for  pid=5630 comm="genhomedircon" name="yp" dev=dm-0 ino=24969261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=dir
>type=AVC msg=audit(1171511993.781:39): avc:  denied  { read } for  pid=5630 comm="genhomedircon" name="highley-recommended.com.2" dev=dm-0 ino=24970464 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_yp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171511993.781:39): arch=c000003e syscall=2 success=yes exit=5 a0=7fff9ad55b20 a1=0 a2=29 a3=0 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.782:40): avc:  denied  { name_bind } for  pid=5630 comm="genhomedircon" src=718 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171511993.782:40): avc:  denied  { node_bind } for  pid=5630 comm="genhomedircon" src=718 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=udp_socket
>type=AVC msg=audit(1171511993.782:40): avc:  denied  { net_bind_service } for  pid=5630 comm="genhomedircon" capability=10 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:semanage_t:s0 tclass=capability
>type=SYSCALL msg=audit(1171511993.782:40): arch=c000003e syscall=49 success=yes exit=0 a0=6 a1=7fff9ad559a0 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.782:41): avc:  denied  { node_bind } for  pid=5630 comm="genhomedircon" scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:inaddr_any_node_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511993.782:41): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff9ad55a80 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.783:42): avc:  denied  { name_connect } for  pid=5630 comm="genhomedircon" dest=111 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511993.783:42): avc:  denied  { send_msg } for  pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=58371 daddr=10.2.2.7 dest=111 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511993.783:42): avc:  denied  { recv_msg } for  pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=111 daddr=10.2.2.7 dest=58371 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511993.783:42): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fff9ad55c50 a2=10 a3=3 items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.783:43): avc:  denied  { name_bind } for  pid=5630 comm="genhomedircon" src=719 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511993.783:43): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff9ad55af0 a2=10 a3=7fff9ad5597c items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=AVC msg=audit(1171511993.783:44): avc:  denied  { name_connect } for  pid=5630 comm="genhomedircon" dest=727 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511993.783:44): avc:  denied  { send_msg } for  pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=719 daddr=10.2.2.7 dest=727 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1171511993.783:44): avc:  denied  { recv_msg } for  pid=5630 comm="genhomedircon" saddr=10.2.2.7 src=727 daddr=10.2.2.7 dest=719 netif=lo scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1171511993.783:44): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7fff9ad55c50 a2=10 a3=7fff9ad5597c items=0 ppid=5628 pid=5630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="genhomedircon" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=DAEMON_END msg=audit(1171511994.615:7472) auditd normal halt, sending auid=4294967295 pid=5758 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2414
>type=DAEMON_START msg=audit(1171512080.549:682) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2546 res=success, auditd pid=2546
>type=CONFIG_CHANGE msg=audit(1171512080.649:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1171512080.660:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=MAC_CONFIG_CHANGE msg=audit(1171512082.353:6): bool=allow_ypbind val=1 old_val=0 auid=4294967295
>type=SYSCALL msg=audit(1171512082.353:6): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff59b69420 a2=2 a3=3 items=0 ppid=2802 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:semanage_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1171512084.277:7): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Officejet_7300_fax uri=hpfax:/net/Officejet_7300_series?ip=10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1171512084.303:8): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=pineneedle uri=socket://10.2.2.10 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=douglas.highley-recommended.com, addr=10.2.2.7, terminal=? res=success)'
>type=USER_START msg=audit(1171512086.443:9): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171512086.443:10): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171512086.901:11): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171512086.901:12): user pid=3126 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=clamilt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171512088.185:13): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session open acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171512088.185:14): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1171512088.261:15): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: setcred acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1171512088.261:16): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='PAM: session close acct=sa-milt : exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1171512089.785:17): avc:  denied  { search } for  pid=3272 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171512089.785:17): avc:  denied  { write } for  pid=3272 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171512089.785:17): avc:  denied  { add_name } for  pid=3272 comm="pyzor" name="We8gcx" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171512089.785:17): avc:  denied  { create } for  pid=3272 comm="pyzor" name="We8gcx" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512089.785:17): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171512089.785:18): avc:  denied  { getattr } for  pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512089.785:18): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff77ccb4d0 a2=7fff77ccb4d0 a3=2 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171512089.785:18):  path="/tmp/We8gcx"
>type=AVC msg=audit(1171512089.785:19): avc:  denied  { write } for  pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512089.785:19): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cffb4 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171512089.785:19):  path="/tmp/We8gcx"
>type=AVC msg=audit(1171512089.786:20): avc:  denied  { remove_name } for  pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171512089.786:20): avc:  denied  { unlink } for  pid=3272 comm="pyzor" name="We8gcx" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512089.786:20): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171512089.787:21): avc:  denied  { read } for  pid=3272 comm="pyzor" name="tmprxWA4i" dev=dm-0 ino=30703625 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512089.787:21): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=3175 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171512089.787:21):  path=2F746D702F746D70727857413469202864656C6574656429
>type=AVC msg=audit(1171512094.665:22): avc:  denied  { signal } for  pid=3175 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171512094.665:22): arch=c000003e syscall=62 success=yes exit=0 a0=cc8 a1=f a2=54 a3=0 items=0 ppid=1 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ERR msg=audit(1171512104.472:23): user pid=3592 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1171512217.696:24): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171512217.696:25): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171512217.700:26): user pid=3689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171512217.701:27): login pid=3689 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171512217.712:28): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171512217.712:29): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171512301.296:30): user pid=3969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171512301.297:31): login pid=3969 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171512301.301:32): user pid=3969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171512301.301:33): user pid=3969 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171512487.006:34): avc:  denied  { getattr } for  pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512487.006:34): arch=c000003e syscall=4 success=yes exit=0 a0=8c4490 a1=7fff656aad00 a2=7fff656aad00 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171512487.006:34):  path="/bin/hostname"
>type=AVC msg=audit(1171512487.007:35): avc:  denied  { execute } for  pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512487.007:35): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=1 a2=0 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171512487.007:36): avc:  denied  { read } for  pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512487.007:36): arch=c000003e syscall=21 success=yes exit=0 a0=8c4490 a1=4 a2=0 a3=3 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1171512487.007:37): avc:  denied  { execute_no_trans } for  pid=4034 comm="sh" name="hostname" dev=dm-0 ino=1441799 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171512487.007:37): arch=c000003e syscall=59 success=yes exit=0 a0=8c4490 a1=8c4bc0 a2=8c4750 a3=8 items=0 ppid=3289 pid=4034 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="hostname" exe="/bin/hostname" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171512487.007:37):  path="/bin/hostname"
>type=USER_ACCT msg=audit(1171512601.973:38): user pid=4056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171512601.973:39): login pid=4056 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171512601.976:40): user pid=4057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171512601.976:41): login pid=4057 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171512601.978:42): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171512601.978:43): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171512601.986:44): user pid=4057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171512601.986:45): user pid=4057 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171512602.038:46): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171512602.038:47): user pid=4056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171512901.308:48): user pid=4143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171512901.308:49): login pid=4143 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171512901.312:50): user pid=4143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171512901.312:51): user pid=4143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171512907.933:52): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171512907.933:53): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171512907.971:54): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171512907.971:55): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1171513182.076:56): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.076:56): arch=c000003e syscall=2 success=yes exit=11 a0=30ffe20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513182.076:57): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.076:57): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513182.076:57):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171513182.089:58): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.089:58): arch=c000003e syscall=2 success=yes exit=8 a0=2d8ecf0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513182.722:59): avc:  denied  { search } for  pid=4467 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171513182.722:59): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513182.728:60): avc:  denied  { getattr } for  pid=4467 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.728:60): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4ea11910 a2=7fff4ea11910 a3=6c6280 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513182.728:60):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171513182.728:61): avc:  denied  { read } for  pid=4467 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.728:61): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513182.729:62): avc:  denied  { search } for  pid=4467 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513182.729:62): avc:  denied  { write } for  pid=4467 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513182.729:62): avc:  denied  { add_name } for  pid=4467 comm="pyzor" name="EqTy59" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513182.729:62): avc:  denied  { create } for  pid=4467 comm="pyzor" name="EqTy59" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.729:62): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513182.729:63): avc:  denied  { getattr } for  pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.729:63): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4ea0fe00 a2=7fff4ea0fe00 a3=3 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513182.729:63):  path="/tmp/EqTy59"
>type=AVC msg=audit(1171513182.729:64): avc:  denied  { write } for  pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.729:64): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513182.729:64):  path="/tmp/EqTy59"
>type=AVC msg=audit(1171513182.729:65): avc:  denied  { remove_name } for  pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513182.729:65): avc:  denied  { unlink } for  pid=4467 comm="pyzor" name="EqTy59" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.729:65): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513182.730:66): avc:  denied  { read } for  pid=4467 comm="pyzor" name="tmpGhNm2V" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513182.730:66): arch=c000003e syscall=0 success=yes exit=685 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4467 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513182.730:66):  path=2F746D702F746D7047684E6D3256202864656C6574656429
>type=AVC msg=audit(1171513187.685:67): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171513187.685:67): arch=c000003e syscall=62 success=yes exit=0 a0=1173 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513187.702:68): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.702:68): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513187.702:68):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171513187.702:69): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.702:69): arch=c000003e syscall=86 success=yes exit=0 a0=3037480 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513187.702:70): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.702:70): arch=c000003e syscall=87 success=yes exit=0 a0=3037480 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513187.703:71): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.703:71): arch=c000003e syscall=2 success=yes exit=8 a0=2ab07c0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513187.756:72): avc:  denied  { write } for  pid=4463 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171513187.756:72): avc:  denied  { add_name } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171513187.756:72): avc:  denied  { create } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.756:72): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171513187.757:73): avc:  denied  { write } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.757:73): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513187.757:73):  path="/home/dhighley/_vFB.j990FB.douglas"
>type=AVC msg=audit(1171513187.757:74): avc:  denied  { getattr } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.757:74): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff582acca0 a2=7fff582acca0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513187.757:74):  path="/home/dhighley/_vFB.j990FB.douglas"
>type=AVC msg=audit(1171513187.757:75): avc:  denied  { link } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.757:75): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fff582acbc0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171513187.757:76): avc:  denied  { remove_name } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171513187.757:76): avc:  denied  { unlink } for  pid=4463 comm="procmail" name="_vFB.j990FB.douglas" dev=dm-0 ino=12484630 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.757:76): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61cfb0 a2=7fff582acbc0 a3=61b670 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171513187.758:77): avc:  denied  { append } for  pid=4463 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513187.758:77): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4460 pid=4463 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171513188.022:78): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171513188.022:79): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171513188.029:80): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171513188.029:81): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1171513199.348:82): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171513199.348:82): arch=c000003e syscall=62 success=yes exit=0 a0=11a4 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171513201.634:83): user pid=4517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171513201.634:84): user pid=4518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171513201.634:85): login pid=4518 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171513201.635:86): login pid=4517 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171513201.640:87): user pid=4518 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171513201.640:88): user pid=4518 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171513201.642:89): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171513201.642:90): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171513201.666:91): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171513201.667:92): user pid=4517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171513240.627:93): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513240.627:93): arch=c000003e syscall=2 success=yes exit=11 a0=323ead0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513240.628:94): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513240.628:94): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513240.628:94):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171513240.634:95): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513240.634:95): arch=c000003e syscall=2 success=yes exit=8 a0=1ceb970 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513241.121:96): avc:  denied  { getattr } for  pid=4542 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.121:96): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffb1c27b20 a2=7fffb1c27b20 a3=6c6280 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513241.121:96):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171513241.121:97): avc:  denied  { read } for  pid=4542 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.121:97): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513241.122:98): avc:  denied  { search } for  pid=4542 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513241.122:98): avc:  denied  { write } for  pid=4542 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513241.122:98): avc:  denied  { add_name } for  pid=4542 comm="pyzor" name="nz_VVw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513241.122:98): avc:  denied  { create } for  pid=4542 comm="pyzor" name="nz_VVw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.122:98): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513241.122:99): avc:  denied  { getattr } for  pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.122:99): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb1c26420 a2=7fffb1c26420 a3=2 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513241.122:99):  path="/tmp/nz_VVw"
>type=AVC msg=audit(1171513241.122:100): avc:  denied  { write } for  pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.122:100): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513241.122:100):  path="/tmp/nz_VVw"
>type=AVC msg=audit(1171513241.122:101): avc:  denied  { remove_name } for  pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171513241.122:101): avc:  denied  { unlink } for  pid=4542 comm="pyzor" name="nz_VVw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.122:101): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6c6280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513241.124:102): avc:  denied  { read } for  pid=4542 comm="pyzor" name="tmpRdgCAg" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513241.124:102): arch=c000003e syscall=0 success=yes exit=464 a0=4 a1=2aaaaf34d000 a2=1000 a3=4f items=0 ppid=3451 pid=4542 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513241.124:102):  path=2F746D702F746D70526467434167202864656C6574656429
>type=AVC msg=audit(1171513246.373:103): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513246.373:103): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171513246.373:103):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171513246.374:104): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513246.374:104): arch=c000003e syscall=86 success=yes exit=0 a0=321a4a0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513246.374:105): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634215 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513246.374:105): arch=c000003e syscall=87 success=yes exit=0 a0=321a4a0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513246.375:106): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513246.375:106): arch=c000003e syscall=2 success=yes exit=8 a0=3214800 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171513289.871:107): avc:  denied  { search } for  pid=4556 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171513289.871:107): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4556 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171513295.304:108): avc:  denied  { append } for  pid=4552 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171513295.304:108): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4549 pid=4552 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171513501.975:109): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171513501.975:110): login pid=4627 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171513501.979:111): user pid=4627 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171513501.979:112): user pid=4627 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171513566.664:113): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171513566.665:114): user pid=4468 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171513801.298:115): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171513801.298:116): login pid=4706 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171513801.299:117): user pid=4705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171513801.300:118): login pid=4705 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171513801.302:119): user pid=4706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171513801.302:120): user pid=4706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171513801.305:121): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171513801.305:122): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171513801.323:123): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171513801.323:124): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171514101.625:125): user pid=4779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171514101.625:126): login pid=4779 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171514101.627:127): user pid=4779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171514101.628:128): user pid=4779 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171514211.005:129): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171514211.006:130): user pid=4153 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171514229.537:131): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171514229.538:132): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171514244.477:133): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171514244.478:134): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171514244.482:135): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171514244.488:136): login pid=3689 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171514244.496:137): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171514244.497:138): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_END msg=audit(1171514264.520:139): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171514264.520:140): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171514278.888:141): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171514278.888:142): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171514278.893:143): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171514278.896:144): login pid=3689 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171514278.906:145): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171514278.906:146): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171514401.034:147): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171514401.034:148): login pid=5304 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171514401.038:149): user pid=5304 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171514401.038:150): user pid=5304 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171514401.040:151): user pid=5303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171514401.040:152): login pid=5303 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171514401.045:153): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171514401.045:154): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171514401.070:155): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171514401.071:156): user pid=5303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171514701.372:157): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171514701.372:158): login pid=5372 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171514701.376:159): user pid=5372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171514701.376:160): user pid=5372 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171514940.007:161): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171514940.008:162): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171514953.431:163): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171514953.431:164): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171514953.436:165): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171514953.441:166): login pid=3689 uid=0 old auid=1000 new auid=0
>type=USER_START msg=audit(1171514953.441:167): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171514953.441:168): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_END msg=audit(1171515000.657:169): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171515000.658:170): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171515001.713:171): user pid=5659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515001.714:172): login pid=5659 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171515001.716:173): user pid=5660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515001.716:174): login pid=5660 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171515001.718:175): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515001.718:176): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171515001.725:177): user pid=5660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515001.725:178): user pid=5660 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171515001.741:179): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171515001.742:180): user pid=5659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171515017.436:181): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171515017.437:182): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171515017.442:183): user pid=3689 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171515017.445:184): login pid=3689 uid=0 old auid=0 new auid=1000
>type=USER_START msg=audit(1171515017.453:185): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171515017.454:186): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171515044.991:187): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171515044.992:188): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171515045.004:189): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171515045.004:190): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1171515185.442:191): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171515185.442:192): user pid=5909 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1171515203.954:193): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515203.954:193): arch=c000003e syscall=2 success=yes exit=11 a0=3305970 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515203.954:194): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515203.954:194): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515203.954:194):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171515203.966:195): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515203.966:195): arch=c000003e syscall=2 success=yes exit=8 a0=31d2a40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515204.572:196): avc:  denied  { search } for  pid=5973 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171515204.572:196): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515204.572:197): avc:  denied  { getattr } for  pid=5973 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.572:197): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffbb850750 a2=7fffbb850750 a3=6c6280 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515204.572:197):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171515204.572:198): avc:  denied  { read } for  pid=5973 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.572:198): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515204.573:199): avc:  denied  { search } for  pid=5973 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515204.573:199): avc:  denied  { write } for  pid=5973 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515204.573:199): avc:  denied  { add_name } for  pid=5973 comm="pyzor" name="Cc1_7l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515204.573:199): avc:  denied  { create } for  pid=5973 comm="pyzor" name="Cc1_7l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.573:199): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515204.574:200): avc:  denied  { getattr } for  pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.574:200): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffbb84ec40 a2=7fffbb84ec40 a3=3 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515204.574:200):  path="/tmp/Cc1_7l"
>type=AVC msg=audit(1171515204.574:201): avc:  denied  { write } for  pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.574:201): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515204.574:201):  path="/tmp/Cc1_7l"
>type=AVC msg=audit(1171515204.574:202): avc:  denied  { remove_name } for  pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515204.574:202): avc:  denied  { unlink } for  pid=5973 comm="pyzor" name="Cc1_7l" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.574:202): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515204.578:203): avc:  denied  { read } for  pid=5973 comm="pyzor" name="tmp2sF7Na" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515204.578:203): arch=c000003e syscall=0 success=yes exit=2306 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=5973 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515204.578:203):  path=2F746D702F746D70327346374E61202864656C6574656429
>type=AVC msg=audit(1171515209.535:204): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171515209.535:204): arch=c000003e syscall=62 success=yes exit=0 a0=1755 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515211.547:205): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.547:205): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515211.547:205):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171515211.547:206): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.547:206): arch=c000003e syscall=86 success=yes exit=0 a0=32200e0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515211.547:207): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.547:207): arch=c000003e syscall=87 success=yes exit=0 a0=32200e0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515211.548:208): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.548:208): arch=c000003e syscall=2 success=yes exit=8 a0=32fe000 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515211.590:209): avc:  denied  { write } for  pid=5969 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171515211.590:209): avc:  denied  { add_name } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171515211.590:209): avc:  denied  { create } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.590:209): arch=c000003e syscall=2 success=yes exit=6 a0=620880 a1=c1 a2=124 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171515211.591:210): avc:  denied  { write } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.591:210): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515211.591:210):  path="/home/dhighley/_RdB.Ld-0FB.douglas"
>type=AVC msg=audit(1171515211.591:211): avc:  denied  { getattr } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.591:211): arch=c000003e syscall=4 success=yes exit=0 a0=620880 a1=7fff03cca6c0 a2=7fff03cca6c0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515211.591:211):  path="/home/dhighley/_RdB.Ld-0FB.douglas"
>type=AVC msg=audit(1171515211.591:212): avc:  denied  { link } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.591:212): arch=c000003e syscall=86 success=yes exit=0 a0=620880 a1=61b510 a2=7fff03cca5e0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171515211.591:213): avc:  denied  { remove_name } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171515211.591:213): avc:  denied  { unlink } for  pid=5969 comm="procmail" name="_RdB.Ld-0FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.591:213): arch=c000003e syscall=87 success=yes exit=0 a0=620880 a1=61b510 a2=7fff03cca5e0 a3=620880 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171515211.591:214): avc:  denied  { append } for  pid=5969 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515211.591:214): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=5966 pid=5969 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171515301.359:215): user pid=5989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515301.360:216): login pid=5989 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171515301.363:217): user pid=5989 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515301.363:218): user pid=5989 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171515335.060:219): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.060:219): arch=c000003e syscall=2 success=yes exit=11 a0=33c3740 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515335.060:220): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.060:220): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515335.060:220):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171515335.078:221): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.078:221): arch=c000003e syscall=2 success=yes exit=8 a0=33aecd0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515335.615:222): avc:  denied  { search } for  pid=6011 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515335.615:222): avc:  denied  { write } for  pid=6011 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515335.615:222): avc:  denied  { add_name } for  pid=6011 comm="pyzor" name="WOhqR6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515335.615:222): avc:  denied  { create } for  pid=6011 comm="pyzor" name="WOhqR6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.615:222): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515335.615:223): avc:  denied  { getattr } for  pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.615:223): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd6b07870 a2=7fffd6b07870 a3=3 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515335.615:223):  path="/tmp/WOhqR6"
>type=AVC msg=audit(1171515335.616:224): avc:  denied  { write } for  pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.616:224): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515335.616:224):  path="/tmp/WOhqR6"
>type=AVC msg=audit(1171515335.616:225): avc:  denied  { remove_name } for  pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171515335.616:225): avc:  denied  { unlink } for  pid=6011 comm="pyzor" name="WOhqR6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.616:225): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae710 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171515335.617:226): avc:  denied  { read } for  pid=6011 comm="pyzor" name="tmp0o-TJ5" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515335.617:226): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6011 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515335.617:226):  path=2F746D702F746D70306F2D544A35202864656C6574656429
>type=AVC msg=audit(1171515342.686:227): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515342.686:227): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171515342.686:227):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171515342.686:228): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515342.686:228): arch=c000003e syscall=86 success=yes exit=0 a0=3089d90 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515342.687:229): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634229 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515342.687:229): arch=c000003e syscall=87 success=yes exit=0 a0=3089d90 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515342.688:230): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515342.688:230): arch=c000003e syscall=2 success=yes exit=8 a0=31ae640 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171515342.718:231): avc:  denied  { append } for  pid=6007 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171515342.718:231): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6004 pid=6007 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171515391.477:232): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171515391.478:233): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171515391.486:234): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171515391.487:235): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171515601.691:236): user pid=6099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515601.691:237): login pid=6099 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171515601.693:238): user pid=6100 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515601.693:239): login pid=6100 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171515601.695:240): user pid=6101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171515601.695:241): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515601.695:242): login pid=6101 uid=0 old auid=4294967295 new auid=111
>type=CRED_ACQ msg=audit(1171515601.695:243): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171515601.702:244): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515601.702:245): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171515601.706:246): user pid=6101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515601.706:247): user pid=6101 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171515601.717:248): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171515601.718:249): user pid=6099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171515661.022:250): user pid=6122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515661.022:251): login pid=6122 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171515661.026:252): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515661.026:253): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171515662.060:254): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171515662.061:255): user pid=6122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171515710.497:256): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171515710.498:257): user pid=6046 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171515833.285:258): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1171515833.285:259): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171515901.068:260): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171515901.069:261): login pid=6232 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171515901.072:262): user pid=6232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171515901.072:263): user pid=6232 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171516201.392:264): user pid=6266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171516201.392:265): login pid=6266 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171516201.393:266): user pid=6267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171516201.393:267): login pid=6267 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171516201.398:268): user pid=6267 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171516201.398:269): user pid=6267 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171516201.403:270): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171516201.403:271): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171516201.426:272): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171516201.426:273): user pid=6266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171516501.724:274): user pid=6302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171516501.725:275): login pid=6302 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171516501.729:276): user pid=6302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171516501.729:277): user pid=6302 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171516801.055:278): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171516801.055:279): login pid=6335 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171516801.057:280): user pid=6336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171516801.057:281): login pid=6336 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171516801.058:282): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171516801.059:283): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171516801.067:284): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171516801.067:285): user pid=6336 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171516801.075:286): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171516801.075:287): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171517101.396:288): user pid=6371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171517101.397:289): login pid=6371 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171517101.400:290): user pid=6371 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171517101.400:291): user pid=6371 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171517401.715:292): user pid=6403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171517401.716:293): login pid=6403 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171517401.717:294): user pid=6404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171517401.717:295): login pid=6404 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171517401.723:296): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171517401.723:297): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171517401.726:298): user pid=6404 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171517401.726:299): user pid=6404 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171517401.741:300): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171517401.741:301): user pid=6403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171517701.057:302): user pid=6442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171517701.057:303): login pid=6442 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171517701.061:304): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171517701.061:305): user pid=6442 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171518001.377:306): user pid=6476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518001.378:307): login pid=6476 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171518001.379:308): user pid=6477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518001.379:309): login pid=6477 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171518001.381:310): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518001.381:311): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171518001.387:312): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518001.387:313): user pid=6477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171518001.401:314): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171518001.401:315): user pid=6476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171518091.203:316): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.203:316): arch=c000003e syscall=2 success=yes exit=11 a0=31bb2a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518091.203:317): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.203:317): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518091.203:317):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171518091.209:318): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.209:318): arch=c000003e syscall=2 success=yes exit=8 a0=2fcb6b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518091.857:319): avc:  denied  { search } for  pid=6508 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171518091.857:319): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518091.857:320): avc:  denied  { getattr } for  pid=6508 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.857:320): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4f769660 a2=7fff4f769660 a3=6c6280 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518091.857:320):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171518091.857:321): avc:  denied  { read } for  pid=6508 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.857:321): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518091.858:322): avc:  denied  { search } for  pid=6508 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518091.858:322): avc:  denied  { write } for  pid=6508 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518091.858:322): avc:  denied  { add_name } for  pid=6508 comm="pyzor" name="ahteRw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518091.858:322): avc:  denied  { create } for  pid=6508 comm="pyzor" name="ahteRw" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.858:322): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518091.858:323): avc:  denied  { getattr } for  pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.858:323): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4f767b50 a2=7fff4f767b50 a3=3 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518091.858:323):  path="/tmp/ahteRw"
>type=AVC msg=audit(1171518091.858:324): avc:  denied  { write } for  pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.858:324): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518091.858:324):  path="/tmp/ahteRw"
>type=AVC msg=audit(1171518091.859:325): avc:  denied  { remove_name } for  pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518091.859:325): avc:  denied  { unlink } for  pid=6508 comm="pyzor" name="ahteRw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.859:325): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518091.864:326): avc:  denied  { read } for  pid=6508 comm="pyzor" name="tmphANQfj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518091.864:326): arch=c000003e syscall=0 success=yes exit=815 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=6508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518091.864:326):  path=2F746D702F746D7068414E51666A202864656C6574656429
>type=AVC msg=audit(1171518096.821:327): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171518096.821:327): arch=c000003e syscall=62 success=yes exit=0 a0=196c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518096.901:328): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.901:328): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518096.901:328):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171518096.901:329): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.901:329): arch=c000003e syscall=86 success=yes exit=0 a0=308a660 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518096.902:330): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.902:330): arch=c000003e syscall=87 success=yes exit=0 a0=308a660 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518096.902:331): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.902:331): arch=c000003e syscall=2 success=yes exit=8 a0=3220450 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518096.986:332): avc:  denied  { write } for  pid=6504 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171518096.986:332): avc:  denied  { add_name } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171518096.986:332): avc:  denied  { create } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:332): arch=c000003e syscall=2 success=yes exit=6 a0=61c970 a1=c1 a2=124 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171518096.986:333): avc:  denied  { write } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:333): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518096.986:333):  path="/home/dhighley/_olB.QK_0FB.douglas"
>type=AVC msg=audit(1171518096.986:334): avc:  denied  { getattr } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:334): arch=c000003e syscall=4 success=yes exit=0 a0=61c970 a1=7ffffe922320 a2=7ffffe922320 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518096.986:334):  path="/home/dhighley/_olB.QK_0FB.douglas"
>type=AVC msg=audit(1171518096.986:335): avc:  denied  { link } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:335): arch=c000003e syscall=86 success=yes exit=0 a0=61c970 a1=61b520 a2=7ffffe922240 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171518096.986:336): avc:  denied  { remove_name } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171518096.986:336): avc:  denied  { unlink } for  pid=6504 comm="procmail" name="_olB.QK_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:336): arch=c000003e syscall=87 success=yes exit=0 a0=61c970 a1=61b520 a2=7ffffe922240 a3=61c970 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171518096.986:337): avc:  denied  { append } for  pid=6504 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518096.986:337): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6499 pid=6504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171518232.591:338): avc:  denied  { search } for  pid=6526 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518232.591:338): avc:  denied  { write } for  pid=6526 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518232.591:338): avc:  denied  { add_name } for  pid=6526 comm="pyzor" name="n38AsA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518232.591:338): avc:  denied  { create } for  pid=6526 comm="pyzor" name="n38AsA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518232.591:338): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518232.591:339): avc:  denied  { getattr } for  pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518232.591:339): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3a67b5f0 a2=7fff3a67b5f0 a3=3 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518232.591:339):  path="/tmp/n38AsA"
>type=AVC msg=audit(1171518232.591:340): avc:  denied  { write } for  pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518232.591:340): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518232.591:340):  path="/tmp/n38AsA"
>type=AVC msg=audit(1171518232.591:341): avc:  denied  { remove_name } for  pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171518232.591:341): avc:  denied  { unlink } for  pid=6526 comm="pyzor" name="n38AsA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518232.591:341): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171518232.592:342): avc:  denied  { read } for  pid=6526 comm="pyzor" name="tmpYEP4Mn" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518232.592:342): arch=c000003e syscall=0 success=yes exit=3573 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6526 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518232.592:342):  path=2F746D702F746D70594550344D6E202864656C6574656429
>type=AVC msg=audit(1171518237.564:343): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518237.564:343): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171518237.564:343):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171518237.564:344): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518237.564:344): arch=c000003e syscall=86 success=yes exit=0 a0=3234550 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518237.564:345): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518237.564:345): arch=c000003e syscall=87 success=yes exit=0 a0=3234550 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171518237.585:346): avc:  denied  { append } for  pid=6522 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171518237.585:346): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6519 pid=6522 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171518301.706:347): user pid=6532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518301.707:348): login pid=6532 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171518301.710:349): user pid=6532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518301.710:350): user pid=6532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171518601.034:351): user pid=6568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518601.034:352): login pid=6568 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171518601.035:353): user pid=6569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518601.035:354): login pid=6569 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171518601.040:355): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518601.040:356): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171518601.045:357): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518601.046:358): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171518601.055:359): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171518601.056:360): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171518901.363:361): user pid=6606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171518901.364:362): login pid=6606 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171518901.367:363): user pid=6606 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171518901.367:364): user pid=6606 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171519201.691:365): user pid=6638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519201.691:366): login pid=6638 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171519201.694:367): user pid=6639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519201.694:368): login pid=6639 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171519201.694:369): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519201.694:370): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171519201.697:371): user pid=6639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519201.698:372): user pid=6639 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171519201.712:373): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171519201.712:374): user pid=6638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171519261.029:375): user pid=6654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519261.029:376): login pid=6654 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171519261.033:377): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519261.033:378): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171519261.907:379): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171519261.908:380): user pid=6654 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171519501.915:381): user pid=6692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519501.915:382): login pid=6692 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171519501.919:383): user pid=6692 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519501.919:384): user pid=6692 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171519801.238:385): user pid=6726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519801.238:386): login pid=6726 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171519801.239:387): user pid=6725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171519801.239:388): login pid=6725 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171519801.242:389): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519801.242:390): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171519801.244:391): user pid=6726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171519801.244:392): user pid=6726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171519801.260:393): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171519801.260:394): user pid=6725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171520101.564:395): user pid=6761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171520101.564:396): login pid=6761 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171520101.568:397): user pid=6761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171520101.568:398): user pid=6761 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171520401.885:399): user pid=6799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171520401.885:400): login pid=6799 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171520401.887:401): user pid=6800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171520401.887:402): login pid=6800 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171520401.889:403): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171520401.889:404): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171520401.895:405): user pid=6800 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171520401.895:406): user pid=6800 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171520401.907:407): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171520401.908:408): user pid=6799 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171520535.407:409): avc:  denied  { search } for  pid=6833 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171520535.407:409): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6833 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171520701.214:410): user pid=6850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171520701.215:411): login pid=6850 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171520701.218:412): user pid=6850 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171520701.218:413): user pid=6850 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171520863.807:414): avc:  denied  { write } for  pid=6877 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171520863.807:414): avc:  denied  { add_name } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171520863.807:414): avc:  denied  { create } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171520863.807:414): arch=c000003e syscall=2 success=yes exit=6 a0=61c600 a1=c1 a2=124 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171520863.808:415): avc:  denied  { write } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171520863.808:415): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171520863.808:415):  path="/home/dhighley/_drB.f1_0FB.douglas"
>type=AVC msg=audit(1171520863.808:416): avc:  denied  { getattr } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171520863.808:416): arch=c000003e syscall=4 success=yes exit=0 a0=61c600 a1=7fff2a3c6dc0 a2=7fff2a3c6dc0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171520863.808:416):  path="/home/dhighley/_drB.f1_0FB.douglas"
>type=AVC msg=audit(1171520863.808:417): avc:  denied  { link } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171520863.808:417): arch=c000003e syscall=86 success=yes exit=0 a0=61c600 a1=61b520 a2=7fff2a3c6ce0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171520863.808:418): avc:  denied  { remove_name } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171520863.808:418): avc:  denied  { unlink } for  pid=6877 comm="procmail" name="_drB.f1_0FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171520863.808:418): arch=c000003e syscall=87 success=yes exit=0 a0=61c600 a1=61b520 a2=7fff2a3c6ce0 a3=61c600 items=0 ppid=6874 pid=6877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171521001.541:419): user pid=6896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521001.542:420): login pid=6896 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171521001.543:421): user pid=6897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521001.543:422): login pid=6897 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171521001.545:423): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521001.545:424): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171521001.548:425): user pid=6897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521001.548:426): user pid=6897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171521001.573:427): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171521001.574:428): user pid=6896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171521301.868:429): user pid=6936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521301.869:430): login pid=6936 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171521301.873:431): user pid=6936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521301.873:432): user pid=6936 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171521396.777:433): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521396.777:433): arch=c000003e syscall=2 success=yes exit=11 a0=339b5c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171521396.777:434): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521396.777:434): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521396.777:434):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171521396.786:435): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521396.786:435): arch=c000003e syscall=2 success=yes exit=8 a0=30817d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171521397.284:436): avc:  denied  { getattr } for  pid=6964 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.284:436): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff4660d510 a2=7fff4660d510 a3=6c6280 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521397.284:436):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171521397.284:437): avc:  denied  { read } for  pid=6964 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.284:437): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171521397.285:438): avc:  denied  { search } for  pid=6964 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171521397.285:438): avc:  denied  { write } for  pid=6964 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171521397.285:438): avc:  denied  { add_name } for  pid=6964 comm="pyzor" name="xMQkOt" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171521397.285:438): avc:  denied  { create } for  pid=6964 comm="pyzor" name="xMQkOt" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.285:438): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171521397.285:439): avc:  denied  { getattr } for  pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.285:439): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff4660ba00 a2=7fff4660ba00 a3=3 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521397.285:439):  path="/tmp/xMQkOt"
>type=AVC msg=audit(1171521397.286:440): avc:  denied  { write } for  pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.286:440): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521397.286:440):  path="/tmp/xMQkOt"
>type=AVC msg=audit(1171521397.286:441): avc:  denied  { remove_name } for  pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171521397.286:441): avc:  denied  { unlink } for  pid=6964 comm="pyzor" name="xMQkOt" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.286:441): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171521397.290:442): avc:  denied  { read } for  pid=6964 comm="pyzor" name="tmp9Bmjjb" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521397.290:442): arch=c000003e syscall=0 success=yes exit=719 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=6964 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521397.290:442):  path=2F746D702F746D7039426D6A6A62202864656C6574656429
>type=AVC msg=audit(1171521402.247:443): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171521402.247:443): arch=c000003e syscall=62 success=yes exit=0 a0=1b34 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171521402.258:444): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521402.258:444): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171521402.258:444):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171521402.259:445): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521402.259:445): arch=c000003e syscall=86 success=yes exit=0 a0=31b4270 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171521402.259:446): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521402.259:446): arch=c000003e syscall=87 success=yes exit=0 a0=31b4270 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171521402.259:447): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171521402.259:447): arch=c000003e syscall=2 success=yes exit=8 a0=33a4cc0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171521601.195:448): user pid=6989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521601.196:449): login pid=6989 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171521601.198:450): user pid=6990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521601.198:451): login pid=6990 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171521601.199:452): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521601.199:453): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171521601.203:454): user pid=6990 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521601.203:455): user pid=6990 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171521601.219:456): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171521601.219:457): user pid=6989 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171521901.521:458): user pid=7028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171521901.521:459): login pid=7028 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171521901.524:460): user pid=7028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171521901.524:461): user pid=7028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171522201.841:462): user pid=7061 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522201.842:463): login pid=7061 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171522201.844:464): user pid=7062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522201.844:465): login pid=7062 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171522201.845:466): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522201.846:467): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171522201.852:468): user pid=7062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522201.853:469): user pid=7062 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171522201.861:470): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171522201.861:471): user pid=7061 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171522501.176:472): user pid=7097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522501.177:473): login pid=7097 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171522501.179:474): user pid=7097 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522501.180:475): user pid=7097 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171522756.796:476): avc:  denied  { search } for  pid=7137 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171522756.796:476): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7137 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171522761.781:477): avc:  denied  { append } for  pid=7133 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171522761.781:477): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=7128 pid=7133 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171522801.496:478): user pid=7142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522801.496:479): login pid=7142 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171522801.498:480): user pid=7143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522801.498:481): login pid=7143 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171522801.500:482): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522801.500:483): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171522801.506:484): user pid=7143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522801.507:485): user pid=7143 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171522801.517:486): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171522801.517:487): user pid=7142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171522861.825:488): user pid=7160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171522861.825:489): login pid=7160 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171522861.829:490): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171522861.829:491): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171522862.708:492): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171522862.708:493): user pid=7160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171523101.715:494): user pid=7202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171523101.715:495): login pid=7202 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171523101.718:496): user pid=7202 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171523101.718:497): user pid=7202 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171523401.036:498): user pid=7250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171523401.036:499): login pid=7250 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171523401.037:500): user pid=7251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171523401.038:501): login pid=7251 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171523401.039:502): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171523401.039:503): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171523401.046:504): user pid=7251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171523401.046:505): user pid=7251 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171523401.058:506): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171523401.058:507): user pid=7250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171523591.076:508): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171523591.076:509): user pid=6100 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171523701.081:510): user pid=7287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171523701.081:511): login pid=7287 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171523701.086:512): user pid=7287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171523701.086:513): user pid=7287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171524001.402:514): user pid=7322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524001.402:515): login pid=7322 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171524001.404:516): user pid=7323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524001.405:517): login pid=7323 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171524001.405:518): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524001.405:519): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171524001.413:520): user pid=7323 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524001.413:521): user pid=7323 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171524001.425:522): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171524001.425:523): user pid=7322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171524301.727:524): user pid=7360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524301.727:525): login pid=7360 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171524301.730:526): user pid=7360 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524301.730:527): user pid=7360 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171524333.098:528): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524333.098:528): arch=c000003e syscall=2 success=yes exit=11 a0=325d240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524333.098:529): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524333.098:529): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524333.098:529):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171524333.106:530): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524333.106:530): arch=c000003e syscall=2 success=yes exit=8 a0=32db950 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524333.753:531): avc:  denied  { getattr } for  pid=7383 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524333.753:531): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0dec9dc0 a2=7fff0dec9dc0 a3=6c6280 items=0 ppid=3451 pid=7383 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524333.753:531):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171524333.753:532): avc:  denied  { read } for  pid=7383 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524333.753:532): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7383 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171524338.715:533): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171524338.715:533): arch=c000003e syscall=62 success=yes exit=0 a0=1cd7 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524338.824:534): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.824:534): arch=c000003e syscall=2 success=yes exit=8 a0=307d850 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524338.921:535): avc:  denied  { write } for  pid=7379 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171524338.921:535): avc:  denied  { add_name } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171524338.921:535): avc:  denied  { create } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.921:535): arch=c000003e syscall=2 success=yes exit=6 a0=61cab0 a1=c1 a2=124 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171524338.921:536): avc:  denied  { write } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.921:536): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524338.921:536):  path="/home/dhighley/_TzB.yrA1FB.douglas"
>type=AVC msg=audit(1171524338.921:537): avc:  denied  { getattr } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.921:537): arch=c000003e syscall=4 success=yes exit=0 a0=61cab0 a1=7fff0eb782d0 a2=7fff0eb782d0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524338.921:537):  path="/home/dhighley/_TzB.yrA1FB.douglas"
>type=AVC msg=audit(1171524338.921:538): avc:  denied  { link } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.921:538): arch=c000003e syscall=86 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff0eb781f0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171524338.921:539): avc:  denied  { remove_name } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171524338.921:539): avc:  denied  { unlink } for  pid=7379 comm="procmail" name="_TzB.yrA1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524338.921:539): arch=c000003e syscall=87 success=yes exit=0 a0=61cab0 a1=61b510 a2=7fff0eb781f0 a3=61cab0 items=0 ppid=7374 pid=7379 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171524404.464:540): avc:  denied  { search } for  pid=7397 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171524404.464:540): avc:  denied  { write } for  pid=7397 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171524404.464:540): avc:  denied  { add_name } for  pid=7397 comm="pyzor" name="krvEqY" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171524404.464:540): avc:  denied  { create } for  pid=7397 comm="pyzor" name="krvEqY" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524404.464:540): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171524404.465:541): avc:  denied  { getattr } for  pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524404.465:541): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa8a0a200 a2=7fffa8a0a200 a3=2 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524404.465:541):  path="/tmp/krvEqY"
>type=AVC msg=audit(1171524404.465:542): avc:  denied  { write } for  pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524404.465:542): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf9e4 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524404.465:542):  path="/tmp/krvEqY"
>type=AVC msg=audit(1171524404.465:543): avc:  denied  { remove_name } for  pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171524404.465:543): avc:  denied  { unlink } for  pid=7397 comm="pyzor" name="krvEqY" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524404.465:543): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171524404.467:544): avc:  denied  { read } for  pid=7397 comm="pyzor" name="tmpZfyJEw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524404.467:544): arch=c000003e syscall=0 success=yes exit=499 a0=4 a1=2aaaaf34d000 a2=1000 a3=61 items=0 ppid=3451 pid=7397 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524404.467:544):  path=2F746D702F746D705A66794A4577202864656C6574656429
>type=USER_ACCT msg=audit(1171524601.046:545): user pid=7422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524601.046:546): login pid=7422 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171524601.048:547): user pid=7423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524601.049:548): login pid=7423 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171524601.053:549): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524601.053:550): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171524601.056:551): user pid=7423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524601.057:552): user pid=7423 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171524601.083:553): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171524601.083:554): user pid=7422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171524604.064:555): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524604.064:555): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171524604.064:555):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171524604.064:556): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524604.064:556): arch=c000003e syscall=86 success=yes exit=0 a0=3083d10 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524604.064:557): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524604.064:557): arch=c000003e syscall=87 success=yes exit=0 a0=3083d10 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171524604.125:558): avc:  denied  { append } for  pid=7417 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171524604.125:558): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7414 pid=7417 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171524901.374:559): user pid=7462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171524901.375:560): login pid=7462 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171524901.378:561): user pid=7462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171524901.378:562): user pid=7462 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171525186.911:563): avc:  denied  { search } for  pid=7508 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171525186.911:563): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7508 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171525201.698:564): user pid=7511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525201.698:565): login pid=7511 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171525201.700:566): user pid=7512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525201.700:567): login pid=7512 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171525201.702:568): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525201.702:569): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171525201.705:570): user pid=7512 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525201.705:571): user pid=7512 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171525201.724:572): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171525201.724:573): user pid=7511 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171525501.030:574): user pid=7547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525501.030:575): login pid=7547 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171525501.034:576): user pid=7547 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525501.034:577): user pid=7547 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171525801.348:578): user pid=7583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525801.349:579): login pid=7583 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171525801.350:580): user pid=7584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525801.351:581): login pid=7584 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171525801.351:582): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525801.352:583): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171525801.358:584): user pid=7584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525801.359:585): user pid=7584 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171525801.372:586): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171525801.373:587): user pid=7583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171525981.681:588): user pid=7610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171525981.682:589): login pid=7610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171525981.685:590): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171525981.685:591): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171525981.852:592): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171525981.852:593): user pid=7610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171526101.857:594): user pid=7630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526101.857:595): login pid=7630 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171526101.861:596): user pid=7630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526101.861:597): user pid=7630 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171526401.190:598): user pid=7666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526401.190:599): login pid=7666 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171526401.192:600): user pid=7667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526401.192:601): login pid=7667 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171526401.192:602): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526401.193:603): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171526401.194:604): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526401.195:605): login pid=7668 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171526401.203:606): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526401.203:607): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171526401.208:608): user pid=7668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526401.208:609): user pid=7668 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171526401.217:610): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171526401.218:611): user pid=7666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171526461.523:612): user pid=7687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526461.523:613): login pid=7687 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171526461.526:614): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526461.526:615): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171526462.419:616): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171526462.419:617): user pid=7687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171526701.429:618): user pid=7726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171526701.429:619): login pid=7726 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171526701.433:620): user pid=7726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171526701.433:621): user pid=7726 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171527001.752:622): user pid=7765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527001.752:623): login pid=7765 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171527001.754:624): user pid=7766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527001.754:625): login pid=7766 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171527001.756:626): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527001.756:627): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171527001.761:628): user pid=7766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527001.762:629): user pid=7766 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171527001.783:630): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171527001.783:631): user pid=7765 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171527301.077:632): user pid=7803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527301.077:633): login pid=7803 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171527301.080:634): user pid=7803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527301.080:635): user pid=7803 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171527601.396:636): user pid=7838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527601.397:637): login pid=7838 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171527601.398:638): user pid=7837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527601.398:639): login pid=7837 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171527601.401:640): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527601.401:641): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171527601.405:642): user pid=7838 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527601.405:643): user pid=7838 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171527601.421:644): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171527601.421:645): user pid=7837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171527638.446:646): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171527638.446:646): arch=c000003e syscall=62 success=yes exit=0 a0=1eb6 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171527640.561:647): avc:  denied  { write } for  pid=7858 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171527640.561:647): avc:  denied  { add_name } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171527640.561:647): avc:  denied  { create } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171527640.561:647): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171527640.561:648): avc:  denied  { write } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171527640.561:648): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171527640.561:648):  path="/home/dhighley/_y6B.YfB1FB.douglas"
>type=AVC msg=audit(1171527640.561:649): avc:  denied  { getattr } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171527640.561:649): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffe6145950 a2=7fffe6145950 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171527640.561:649):  path="/home/dhighley/_y6B.YfB1FB.douglas"
>type=AVC msg=audit(1171527640.561:650): avc:  denied  { link } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171527640.561:650): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61d3f0 a2=7fffe6145870 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171527640.561:651): avc:  denied  { remove_name } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171527640.561:651): avc:  denied  { unlink } for  pid=7858 comm="procmail" name="_y6B.YfB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171527640.561:651): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61d3f0 a2=7fffe6145870 a3=61b650 items=0 ppid=7853 pid=7858 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171527901.733:652): user pid=7885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171527901.733:653): login pid=7885 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171527901.737:654): user pid=7885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171527901.737:655): user pid=7885 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171528080.463:656): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.463:656): arch=c000003e syscall=2 success=yes exit=11 a0=32ab4c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171528080.463:657): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.463:657): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528080.463:657):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171528080.472:658): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.472:658): arch=c000003e syscall=2 success=yes exit=8 a0=32252d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171528080.965:659): avc:  denied  { getattr } for  pid=7921 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.965:659): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff49e3ad30 a2=7fff49e3ad30 a3=6c6280 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528080.965:659):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171528080.965:660): avc:  denied  { read } for  pid=7921 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.965:660): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171528080.966:661): avc:  denied  { search } for  pid=7921 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171528080.966:661): avc:  denied  { write } for  pid=7921 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171528080.966:661): avc:  denied  { add_name } for  pid=7921 comm="pyzor" name="iB3EKN" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171528080.966:661): avc:  denied  { create } for  pid=7921 comm="pyzor" name="iB3EKN" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.966:661): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171528080.967:662): avc:  denied  { getattr } for  pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.967:662): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff49e39220 a2=7fff49e39220 a3=3 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528080.967:662):  path="/tmp/iB3EKN"
>type=AVC msg=audit(1171528080.967:663): avc:  denied  { write } for  pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.967:663): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528080.967:663):  path="/tmp/iB3EKN"
>type=AVC msg=audit(1171528080.967:664): avc:  denied  { remove_name } for  pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171528080.967:664): avc:  denied  { unlink } for  pid=7921 comm="pyzor" name="iB3EKN" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.967:664): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171528080.971:665): avc:  denied  { read } for  pid=7921 comm="pyzor" name="tmpFEFENe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528080.971:665): arch=c000003e syscall=0 success=yes exit=1123 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=7921 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528080.971:665):  path=2F746D702F746D70464546454E65202864656C6574656429
>type=AVC msg=audit(1171528086.406:666): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528086.406:666): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171528086.406:666):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171528086.407:667): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528086.407:667): arch=c000003e syscall=86 success=yes exit=0 a0=32aafe0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171528086.407:668): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528086.407:668): arch=c000003e syscall=87 success=yes exit=0 a0=32aafe0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171528086.408:669): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528086.408:669): arch=c000003e syscall=2 success=yes exit=8 a0=234dcb0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171528151.689:670): avc:  denied  { append } for  pid=7931 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171528151.689:670): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=7928 pid=7931 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171528201.055:671): user pid=7942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171528201.056:672): login pid=7942 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171528201.058:673): user pid=7943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171528201.058:674): login pid=7943 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171528201.062:675): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171528201.063:676): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171528201.065:677): user pid=7943 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171528201.066:678): user pid=7943 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171528201.081:679): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171528201.081:680): user pid=7942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171528501.403:681): user pid=7988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171528501.403:682): login pid=7988 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171528501.407:683): user pid=7988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171528501.407:684): user pid=7988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171528510.881:685): avc:  denied  { search } for  pid=8010 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171528510.881:685): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8010 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171528515.957:686): avc:  denied  { write } for  pid=8006 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171528515.957:686): avc:  denied  { add_name } for  pid=8006 comm="procmail" name="_G9B.DtB1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171528515.957:686): arch=c000003e syscall=2 success=yes exit=6 a0=61c980 a1=c1 a2=124 a3=61c980 items=0 ppid=8001 pid=8006 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171528515.957:687): avc:  denied  { remove_name } for  pid=8006 comm="procmail" name="_G9B.DtB1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171528515.957:687): arch=c000003e syscall=87 success=yes exit=0 a0=61c980 a1=61b530 a2=7fffd9457d60 a3=61c980 items=0 ppid=8001 pid=8006 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171528801.739:688): user pid=8036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171528801.740:689): login pid=8036 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171528801.740:690): user pid=8037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171528801.741:691): login pid=8037 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171528801.743:692): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171528801.743:693): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171528801.744:694): user pid=8037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171528801.745:695): user pid=8037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171528801.767:696): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171528801.768:697): user pid=8036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171529101.069:698): user pid=8075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171529101.070:699): login pid=8075 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171529101.074:700): user pid=8075 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171529101.074:701): user pid=8075 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171529401.389:702): user pid=8112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171529401.389:703): login pid=8112 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171529401.391:704): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171529401.392:705): login pid=8113 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171529401.392:706): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171529401.392:707): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171529401.400:708): user pid=8113 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171529401.400:709): user pid=8113 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171529401.406:710): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171529401.406:711): user pid=8112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171529701.718:712): user pid=8147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171529701.719:713): login pid=8147 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171529701.721:714): user pid=8147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171529701.722:715): user pid=8147 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171530001.037:716): user pid=8181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530001.037:717): login pid=8181 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171530001.039:718): user pid=8182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530001.039:719): login pid=8182 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171530001.044:720): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530001.044:721): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171530001.050:722): user pid=8182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530001.050:723): user pid=8182 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171530001.072:724): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171530001.072:725): user pid=8181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171530028.047:726): avc:  denied  { create } for  pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530028.047:726): arch=c000003e syscall=2 success=yes exit=6 a0=61c800 a1=c1 a2=124 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171530028.047:727): avc:  denied  { write } for  pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530028.047:727): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171530028.047:727):  path="/home/dhighley/_JAC.sEC1FB.douglas"
>type=AVC msg=audit(1171530028.048:728): avc:  denied  { getattr } for  pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530028.048:728): arch=c000003e syscall=4 success=yes exit=0 a0=61c800 a1=7fff8a966360 a2=7fff8a966360 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171530028.048:728):  path="/home/dhighley/_JAC.sEC1FB.douglas"
>type=AVC msg=audit(1171530028.048:729): avc:  denied  { link } for  pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530028.048:729): arch=c000003e syscall=86 success=yes exit=0 a0=61c800 a1=61b520 a2=7fff8a966280 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171530028.048:730): avc:  denied  { unlink } for  pid=8201 comm="procmail" name="_JAC.sEC1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530028.048:730): arch=c000003e syscall=87 success=yes exit=0 a0=61c800 a1=61b520 a2=7fff8a966280 a3=61c800 items=0 ppid=8196 pid=8201 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171530061.362:731): user pid=8209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530061.363:732): login pid=8209 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171530061.367:733): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530061.367:734): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171530062.275:735): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171530062.276:736): user pid=8209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171530301.281:737): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530301.282:738): login pid=8247 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171530301.286:739): user pid=8247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530301.286:740): user pid=8247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171530601.605:741): user pid=8292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530601.606:742): login pid=8292 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171530601.608:743): user pid=8293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530601.608:744): login pid=8293 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171530601.611:745): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530601.612:746): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171530601.613:747): user pid=8293 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530601.614:748): user pid=8293 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171530601.631:749): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171530601.631:750): user pid=8292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171530650.127:751): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530650.127:751): arch=c000003e syscall=2 success=yes exit=11 a0=3356c20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171530650.127:752): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530650.127:752): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171530650.127:752):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171530650.135:753): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530650.135:753): arch=c000003e syscall=2 success=yes exit=8 a0=33d32c0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171530650.705:754): avc:  denied  { getattr } for  pid=8316 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530650.705:754): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff08c99b90 a2=7fff08c99b90 a3=6c6280 items=0 ppid=3451 pid=8316 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171530650.705:754):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171530650.705:755): avc:  denied  { read } for  pid=8316 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530650.705:755): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8316 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171530655.667:756): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171530655.667:756): arch=c000003e syscall=62 success=yes exit=0 a0=207c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171530655.772:757): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171530655.772:757): arch=c000003e syscall=2 success=yes exit=8 a0=3268a40 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171530901.933:758): user pid=8338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171530901.934:759): login pid=8338 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171530901.938:760): user pid=8338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171530901.938:761): user pid=8338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171531201.258:762): user pid=8374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171531201.258:763): login pid=8374 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171531201.260:764): user pid=8375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171531201.260:765): login pid=8375 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171531201.262:766): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171531201.262:767): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171531201.269:768): user pid=8375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171531201.269:769): user pid=8375 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171531201.281:770): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171531201.281:771): user pid=8374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171531501.592:772): user pid=8410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171531501.592:773): login pid=8410 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171531501.596:774): user pid=8410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171531501.596:775): user pid=8410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171531560.381:776): avc:  denied  { search } for  pid=8433 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171531560.381:776): avc:  denied  { write } for  pid=8433 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171531560.381:776): avc:  denied  { add_name } for  pid=8433 comm="pyzor" name="lWfLpO" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171531560.381:776): avc:  denied  { create } for  pid=8433 comm="pyzor" name="lWfLpO" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531560.381:776): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171531560.382:777): avc:  denied  { getattr } for  pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531560.382:777): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe89ab1a0 a2=7fffe89ab1a0 a3=2 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171531560.382:777):  path="/tmp/lWfLpO"
>type=AVC msg=audit(1171531560.382:778): avc:  denied  { write } for  pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531560.382:778): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171531560.382:778):  path="/tmp/lWfLpO"
>type=AVC msg=audit(1171531560.382:779): avc:  denied  { remove_name } for  pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171531560.382:779): avc:  denied  { unlink } for  pid=8433 comm="pyzor" name="lWfLpO" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531560.382:779): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171531560.384:780): avc:  denied  { read } for  pid=8433 comm="pyzor" name="tmpu_orh0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531560.384:780): arch=c000003e syscall=0 success=yes exit=908 a0=4 a1=2aaaaf34d000 a2=1000 a3=8d items=0 ppid=3451 pid=8433 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171531560.384:780):  path=2F746D702F746D70755F6F726830202864656C6574656429
>type=AVC msg=audit(1171531565.543:781): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531565.543:781): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171531565.543:781):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171531565.544:782): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531565.544:782): arch=c000003e syscall=86 success=yes exit=0 a0=31ed3c0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171531565.544:783): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531565.544:783): arch=c000003e syscall=87 success=yes exit=0 a0=31ed3c0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171531801.911:784): user pid=8454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171531801.911:785): login pid=8454 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171531801.913:786): user pid=8455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171531801.913:787): login pid=8455 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171531801.915:788): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171531801.915:789): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171531801.919:790): user pid=8455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171531801.919:791): user pid=8455 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171531801.932:792): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171531801.932:793): user pid=8454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171531901.410:794): avc:  denied  { search } for  pid=8483 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171531901.410:794): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8483 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171531906.398:795): avc:  denied  { append } for  pid=8479 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171531906.398:795): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=8476 pid=8479 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171532101.253:796): user pid=8501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171532101.253:797): login pid=8501 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171532101.257:798): user pid=8501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171532101.257:799): user pid=8501 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171532401.582:800): user pid=8536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171532401.582:801): login pid=8536 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171532401.583:802): user pid=8537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171532401.583:803): login pid=8537 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171532401.586:804): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171532401.586:805): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171532401.588:806): user pid=8537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171532401.588:807): user pid=8537 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171532401.602:808): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171532401.602:809): user pid=8536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171532701.921:810): user pid=8574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171532701.921:811): login pid=8574 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171532701.924:812): user pid=8574 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171532701.924:813): user pid=8574 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171533001.251:814): user pid=8608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533001.251:815): login pid=8608 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171533001.253:816): user pid=8609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533001.254:817): login pid=8609 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171533001.256:818): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533001.256:819): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171533001.261:820): user pid=8609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533001.261:821): user pid=8609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171533001.273:822): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171533001.274:823): user pid=8608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171533301.584:824): user pid=8644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533301.585:825): login pid=8644 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171533301.589:826): user pid=8644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533301.589:827): user pid=8644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171533354.491:828): avc:  denied  { write } for  pid=8662 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171533354.491:828): avc:  denied  { add_name } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171533354.491:828): avc:  denied  { create } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171533354.491:828): arch=c000003e syscall=2 success=yes exit=6 a0=61cc60 a1=c1 a2=124 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171533354.492:829): avc:  denied  { write } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171533354.492:829): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171533354.492:829):  path="/home/dhighley/_WHC.q4C1FB.douglas"
>type=AVC msg=audit(1171533354.492:830): avc:  denied  { getattr } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171533354.492:830): arch=c000003e syscall=4 success=yes exit=0 a0=61cc60 a1=7fff87119870 a2=7fff87119870 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171533354.492:830):  path="/home/dhighley/_WHC.q4C1FB.douglas"
>type=AVC msg=audit(1171533354.492:831): avc:  denied  { link } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171533354.492:831): arch=c000003e syscall=86 success=yes exit=0 a0=61cc60 a1=61b510 a2=7fff87119790 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171533354.492:832): avc:  denied  { remove_name } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171533354.492:832): avc:  denied  { unlink } for  pid=8662 comm="procmail" name="_WHC.q4C1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171533354.492:832): arch=c000003e syscall=87 success=yes exit=0 a0=61cc60 a1=61b510 a2=7fff87119790 a3=61cc60 items=0 ppid=8657 pid=8662 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171533601.910:833): user pid=8697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533601.910:834): login pid=8697 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171533601.912:835): user pid=8698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533601.912:836): login pid=8698 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171533601.913:837): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533601.913:838): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171533601.917:839): user pid=8698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533601.917:840): user pid=8698 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171533601.940:841): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171533601.941:842): user pid=8697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171533661.232:843): user pid=8712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533661.232:844): login pid=8712 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171533661.236:845): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533661.236:846): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171533662.144:847): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171533662.145:848): user pid=8712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171533901.151:849): user pid=8756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171533901.152:850): login pid=8756 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171533901.156:851): user pid=8756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171533901.156:852): user pid=8756 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171534118.254:853): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534118.254:853): arch=c000003e syscall=1 success=yes exit=63 a0=8 a1=3224bc0 a2=3f a3=3224bc0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534118.254:853):  path="/home/dhighley/.razor/razor-agent.log"
>type=AVC msg=audit(1171534118.295:854): avc:  denied  { getattr } for  pid=8796 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534118.295:854): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff11fa8ea0 a2=7fff11fa8ea0 a3=6c6280 items=0 ppid=3451 pid=8796 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534118.295:854):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171534118.295:855): avc:  denied  { read } for  pid=8796 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534118.295:855): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8796 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171534123.258:856): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171534123.258:856): arch=c000003e syscall=62 success=yes exit=0 a0=225c a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171534123.271:857): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534123.271:857): arch=c000003e syscall=2 success=yes exit=8 a0=3336cf0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171534201.475:858): user pid=8803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171534201.475:859): login pid=8803 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171534201.478:860): user pid=8804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171534201.478:861): login pid=8804 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171534201.478:862): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171534201.478:863): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171534201.486:864): user pid=8804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171534201.487:865): user pid=8804 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171534201.498:866): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171534201.498:867): user pid=8803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171534390.133:868): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171534390.134:869): user pid=7667 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171534425.680:870): avc:  denied  { search } for  pid=8846 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171534425.680:870): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171534425.681:871): avc:  denied  { search } for  pid=8846 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171534425.681:871): avc:  denied  { write } for  pid=8846 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171534425.681:871): avc:  denied  { add_name } for  pid=8846 comm="pyzor" name="tiHy5R" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171534425.681:871): avc:  denied  { create } for  pid=8846 comm="pyzor" name="tiHy5R" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534425.681:871): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171534425.682:872): avc:  denied  { getattr } for  pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534425.682:872): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffffca1c220 a2=7ffffca1c220 a3=2 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534425.682:872):  path="/tmp/tiHy5R"
>type=AVC msg=audit(1171534425.682:873): avc:  denied  { write } for  pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534425.682:873): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534425.682:873):  path="/tmp/tiHy5R"
>type=AVC msg=audit(1171534425.682:874): avc:  denied  { remove_name } for  pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171534425.682:874): avc:  denied  { unlink } for  pid=8846 comm="pyzor" name="tiHy5R" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534425.682:874): arch=c000003e syscall=87 success=yes exit=0 a0=6c6240 a1=6cc6c0 a2=37a8f2f4d8 a3=6c6240 items=0 ppid=3451 pid=8846 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171534427.153:875): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534427.153:875): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534427.153:875):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171534427.153:876): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534427.153:876): arch=c000003e syscall=86 success=yes exit=0 a0=31a6250 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171534427.154:877): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534427.154:877): arch=c000003e syscall=87 success=yes exit=0 a0=31a6250 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171534427.314:878): avc:  denied  { append } for  pid=8842 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534427.314:878): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=8837 pid=8842 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171534430.696:879): avc:  denied  { read } for  pid=8855 comm="pyzor" name="tmpsjiHj6" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171534430.696:879): arch=c000003e syscall=0 success=yes exit=2246 a0=4 a1=2aaaaf34d000 a2=1000 a3=1c3 items=0 ppid=3451 pid=8855 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171534430.696:879):  path=2F746D702F746D70736A69486A36202864656C6574656429
>type=USER_ACCT msg=audit(1171534501.139:880): user pid=8861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171534501.139:881): login pid=8861 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171534501.143:882): user pid=8861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171534501.143:883): user pid=8861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171534801.458:884): user pid=8900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171534801.458:885): login pid=8900 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171534801.460:886): user pid=8901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171534801.460:887): login pid=8901 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171534801.462:888): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171534801.462:889): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171534801.467:890): user pid=8901 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171534801.467:891): user pid=8901 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171534801.482:892): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171534801.483:893): user pid=8900 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171535101.802:894): user pid=8938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171535101.802:895): login pid=8938 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171535101.805:896): user pid=8938 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171535101.805:897): user pid=8938 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171535401.121:898): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171535401.122:899): login pid=8972 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171535401.123:900): user pid=8971 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171535401.123:901): login pid=8971 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171535401.126:902): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171535401.126:903): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171535401.128:904): user pid=8972 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171535401.128:905): user pid=8972 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171535401.145:906): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171535401.145:907): user pid=8971 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171535701.449:908): user pid=9009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171535701.449:909): login pid=9009 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171535701.452:910): user pid=9009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171535701.452:911): user pid=9009 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171536001.768:912): user pid=9043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536001.769:913): login pid=9043 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171536001.770:914): user pid=9044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536001.770:915): login pid=9044 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171536001.771:916): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536001.771:917): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171536001.781:918): user pid=9044 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536001.781:919): user pid=9044 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171536001.786:920): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171536001.786:921): user pid=9043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171536301.101:922): user pid=9080 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536301.101:923): login pid=9080 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171536301.105:924): user pid=9080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536301.105:925): user pid=9080 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171536601.421:926): user pid=9113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536601.421:927): login pid=9113 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171536601.423:928): user pid=9114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536601.423:929): login pid=9114 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171536601.425:930): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536601.425:931): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171536601.434:932): user pid=9114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536601.434:933): user pid=9114 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171536601.441:934): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171536601.441:935): user pid=9113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171536776.856:936): avc:  denied  { write } for  pid=9144 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171536776.856:936): avc:  denied  { add_name } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171536776.856:936): avc:  denied  { create } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171536776.856:936): arch=c000003e syscall=2 success=yes exit=6 a0=61a500 a1=c1 a2=124 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171536776.857:937): avc:  denied  { write } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171536776.857:937): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171536776.857:937):  path="/home/dhighley/_4OC.IuD1FB.douglas"
>type=AVC msg=audit(1171536776.857:938): avc:  denied  { getattr } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171536776.857:938): arch=c000003e syscall=4 success=yes exit=0 a0=61a500 a1=7fff4ff42920 a2=7fff4ff42920 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171536776.857:938):  path="/home/dhighley/_4OC.IuD1FB.douglas"
>type=AVC msg=audit(1171536776.857:939): avc:  denied  { link } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171536776.857:939): arch=c000003e syscall=86 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff4ff42840 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171536776.857:940): avc:  denied  { remove_name } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171536776.857:940): avc:  denied  { unlink } for  pid=9144 comm="procmail" name="_4OC.IuD1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171536776.857:940): arch=c000003e syscall=87 success=yes exit=0 a0=61a500 a1=61a4e0 a2=7fff4ff42840 a3=61a500 items=0 ppid=9139 pid=9144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171536901.749:941): user pid=9159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171536901.749:942): login pid=9159 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171536901.753:943): user pid=9159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171536901.753:944): user pid=9159 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171537201.075:945): user pid=9195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537201.075:946): login pid=9195 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171537201.077:947): user pid=9197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537201.077:948): login pid=9197 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171537201.079:949): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537201.079:950): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171537201.079:951): user pid=9196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537201.079:952): login pid=9196 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171537201.086:953): user pid=9197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537201.086:954): user pid=9197 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171537201.088:955): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537201.088:956): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171537201.104:957): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171537201.105:958): user pid=9195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171537261.405:959): user pid=9216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537261.405:960): login pid=9216 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171537261.408:961): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537261.408:962): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171537262.310:963): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171537262.311:964): user pid=9216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171537501.317:965): user pid=9255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537501.317:966): login pid=9255 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171537501.320:967): user pid=9255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537501.320:968): user pid=9255 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171537746.732:969): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171537746.732:969): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171537746.732:969):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171537747.269:970): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171537747.269:970): arch=c000003e syscall=1 success=yes exit=63 a0=8 a1=322d2c0 a2=3f a3=322d2c0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171537747.269:970):  path="/home/dhighley/.razor/razor-agent.log"
>type=AVC msg=audit(1171537747.310:971): avc:  denied  { getattr } for  pid=9293 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171537747.310:971): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc88c77c0 a2=7fffc88c77c0 a3=6c6280 items=0 ppid=3451 pid=9293 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171537747.310:971):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171537747.310:972): avc:  denied  { read } for  pid=9293 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171537747.310:972): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9293 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171537752.272:973): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171537752.272:973): arch=c000003e syscall=62 success=yes exit=0 a0=244d a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171537752.285:974): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171537752.285:974): arch=c000003e syscall=2 success=yes exit=8 a0=333d2b0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171537801.640:975): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537801.640:976): login pid=9298 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171537801.643:977): user pid=9299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171537801.643:978): login pid=9299 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171537801.646:979): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537801.646:980): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171537801.649:981): user pid=9299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171537801.649:982): user pid=9299 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171537801.664:983): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171537801.664:984): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171538101.979:985): user pid=9335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171538101.979:986): login pid=9335 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171538101.983:987): user pid=9335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171538101.983:988): user pid=9335 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171538365.916:989): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538365.916:989): arch=c000003e syscall=2 success=yes exit=11 a0=308a900 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171538370.355:990): avc:  denied  { search } for  pid=9382 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171538370.355:990): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171538370.356:991): avc:  denied  { search } for  pid=9382 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171538370.356:991): avc:  denied  { write } for  pid=9382 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171538370.356:991): avc:  denied  { add_name } for  pid=9382 comm="pyzor" name="-RHa0l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171538370.356:991): avc:  denied  { create } for  pid=9382 comm="pyzor" name="-RHa0l" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538370.356:991): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171538370.356:992): avc:  denied  { getattr } for  pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538370.356:992): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffa14b08a0 a2=7fffa14b08a0 a3=3 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538370.356:992):  path="/tmp/-RHa0l"
>type=AVC msg=audit(1171538370.356:993): avc:  denied  { write } for  pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538370.356:993): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538370.356:993):  path="/tmp/-RHa0l"
>type=AVC msg=audit(1171538370.356:994): avc:  denied  { remove_name } for  pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171538370.356:994): avc:  denied  { unlink } for  pid=9382 comm="pyzor" name="-RHa0l" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538370.356:994): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6d82f0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171538370.357:995): avc:  denied  { read } for  pid=9382 comm="pyzor" name="tmpJU4AIn" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538370.357:995): arch=c000003e syscall=0 success=yes exit=238 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=9382 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538370.357:995):  path=2F746D702F746D704A553441496E202864656C6574656429
>type=AVC msg=audit(1171538375.325:996): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538375.325:996): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538375.325:996):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171538375.325:997): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538375.325:997): arch=c000003e syscall=86 success=yes exit=0 a0=3312be0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171538375.325:998): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538375.325:998): arch=c000003e syscall=87 success=yes exit=0 a0=3312be0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171538375.340:999): avc:  denied  { append } for  pid=9378 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538375.340:999): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=9373 pid=9378 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171538401.304:1000): user pid=9385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171538401.305:1001): login pid=9385 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171538401.306:1002): user pid=9386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171538401.307:1003): login pid=9386 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171538401.309:1004): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171538401.309:1005): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171538401.312:1006): user pid=9386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171538401.312:1007): user pid=9386 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171538401.330:1008): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171538401.331:1009): user pid=9385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171538701.645:1010): user pid=9421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171538701.646:1011): login pid=9421 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171538701.649:1012): user pid=9421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171538701.649:1013): user pid=9421 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171538722.333:1014): avc:  denied  { write } for  pid=9441 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171538722.333:1014): avc:  denied  { add_name } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171538722.333:1014): avc:  denied  { create } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538722.333:1014): arch=c000003e syscall=2 success=yes exit=6 a0=61cc00 a1=c1 a2=124 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171538722.334:1015): avc:  denied  { write } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538722.334:1015): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538722.334:1015):  path="/home/dhighley/_hTC.iME1FB.douglas"
>type=AVC msg=audit(1171538722.334:1016): avc:  denied  { getattr } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538722.334:1016): arch=c000003e syscall=4 success=yes exit=0 a0=61cc00 a1=7fff1e036a30 a2=7fff1e036a30 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171538722.334:1016):  path="/home/dhighley/_hTC.iME1FB.douglas"
>type=AVC msg=audit(1171538722.334:1017): avc:  denied  { link } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538722.334:1017): arch=c000003e syscall=86 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff1e036950 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171538722.334:1018): avc:  denied  { remove_name } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171538722.334:1018): avc:  denied  { unlink } for  pid=9441 comm="procmail" name="_hTC.iME1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171538722.334:1018): arch=c000003e syscall=87 success=yes exit=0 a0=61cc00 a1=61b520 a2=7fff1e036950 a3=61cc00 items=0 ppid=9436 pid=9441 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171539001.967:1019): user pid=9475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539001.967:1020): login pid=9475 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171539001.969:1021): user pid=9476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539001.969:1022): login pid=9476 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171539001.970:1023): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539001.971:1024): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171539001.976:1025): user pid=9476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539001.976:1026): user pid=9476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171539001.989:1027): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171539001.990:1028): user pid=9475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171539301.315:1029): user pid=9514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539301.316:1030): login pid=9514 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171539301.320:1031): user pid=9514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539301.320:1032): user pid=9514 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171539601.647:1033): user pid=9562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539601.648:1034): login pid=9562 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171539601.650:1035): user pid=9563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539601.650:1036): login pid=9563 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171539601.652:1037): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539601.652:1038): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171539601.657:1039): user pid=9563 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539601.657:1040): user pid=9563 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171539601.671:1041): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171539601.671:1042): user pid=9562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171539707.071:1043): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171539707.071:1043): arch=c000003e syscall=62 success=yes exit=0 a0=257b a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171539901.982:1044): user pid=9613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171539901.983:1045): login pid=9613 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171539901.986:1046): user pid=9613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171539901.986:1047): user pid=9613 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171540190.998:1048): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540190.998:1048): arch=c000003e syscall=2 success=yes exit=11 a0=340ec00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171540190.998:1049): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540190.998:1049): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171540190.998:1049):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171540191.007:1050): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540191.007:1050): arch=c000003e syscall=2 success=yes exit=8 a0=30da240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171540191.791:1051): avc:  denied  { getattr } for  pid=9656 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540191.791:1051): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffac0b6fb0 a2=7fffac0b6fb0 a3=6c6280 items=0 ppid=3451 pid=9656 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171540191.791:1051):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171540191.791:1052): avc:  denied  { read } for  pid=9656 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540191.791:1052): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9656 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171540198.153:1053): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540198.153:1053): arch=c000003e syscall=2 success=yes exit=8 a0=3405830 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171540201.308:1054): user pid=9658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540201.309:1055): login pid=9658 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171540201.311:1056): user pid=9659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540201.311:1057): login pid=9659 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171540201.313:1058): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540201.313:1059): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171540201.326:1060): user pid=9659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540201.326:1061): user pid=9659 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171540201.332:1062): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171540201.332:1063): user pid=9658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171540501.654:1064): user pid=9696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540501.654:1065): login pid=9696 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171540501.657:1066): user pid=9696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540501.657:1067): user pid=9696 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171540801.973:1068): user pid=9730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540801.973:1069): login pid=9730 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171540801.976:1070): user pid=9731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540801.976:1071): login pid=9731 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171540801.979:1072): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540801.979:1073): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171540801.981:1074): user pid=9731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540801.981:1075): user pid=9731 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171540801.997:1076): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171540801.997:1077): user pid=9730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171540861.303:1078): user pid=9746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540861.304:1079): login pid=9746 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171540861.308:1080): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540861.308:1081): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171540862.215:1082): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171540862.216:1083): user pid=9746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171540921.219:1084): user pid=9771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171540921.219:1085): login pid=9771 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171540921.223:1086): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171540921.223:1087): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171540998.446:1088): avc:  denied  { search } for  pid=9802 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171540998.446:1088): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171540998.447:1089): avc:  denied  { search } for  pid=9802 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171540998.447:1089): avc:  denied  { write } for  pid=9802 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171540998.447:1089): avc:  denied  { add_name } for  pid=9802 comm="pyzor" name="KCVhjA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171540998.447:1089): avc:  denied  { create } for  pid=9802 comm="pyzor" name="KCVhjA" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540998.447:1089): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171540998.448:1090): avc:  denied  { getattr } for  pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540998.448:1090): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffcdb15f00 a2=7fffcdb15f00 a3=3 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171540998.448:1090):  path="/tmp/KCVhjA"
>type=AVC msg=audit(1171540998.448:1091): avc:  denied  { write } for  pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540998.448:1091): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15894 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171540998.448:1091):  path="/tmp/KCVhjA"
>type=AVC msg=audit(1171540998.448:1092): avc:  denied  { remove_name } for  pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171540998.448:1092): avc:  denied  { unlink } for  pid=9802 comm="pyzor" name="KCVhjA" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540998.448:1092): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171540998.449:1093): avc:  denied  { read } for  pid=9802 comm="pyzor" name="tmp0JO00S" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171540998.449:1093): arch=c000003e syscall=0 success=yes exit=674 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=9802 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171540998.449:1093):  path=2F746D702F746D70304A4F303053202864656C6574656429
>type=AVC msg=audit(1171541003.420:1094): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171541003.420:1094): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171541003.420:1094):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171541003.420:1095): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171541003.420:1095): arch=c000003e syscall=86 success=yes exit=0 a0=30da420 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171541003.420:1096): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171541003.420:1096): arch=c000003e syscall=87 success=yes exit=0 a0=30da420 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171541003.441:1097): avc:  denied  { append } for  pid=9798 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171541003.441:1097): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=9793 pid=9798 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171541101.226:1098): user pid=9811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171541101.226:1099): login pid=9811 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171541101.231:1100): user pid=9811 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171541101.231:1101): user pid=9811 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171541401.551:1102): user pid=9851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171541401.551:1103): login pid=9851 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171541401.551:1104): user pid=9850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171541401.551:1105): login pid=9850 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171541401.557:1106): user pid=9851 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171541401.557:1107): user pid=9851 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171541401.562:1108): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171541401.562:1109): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171541401.582:1110): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171541401.582:1111): user pid=9850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171541701.885:1112): user pid=9898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171541701.885:1113): login pid=9898 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171541701.888:1114): user pid=9898 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171541701.888:1115): user pid=9898 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171542001.215:1116): user pid=9932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542001.216:1117): login pid=9932 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171542001.217:1118): user pid=9933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542001.217:1119): login pid=9933 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171542001.219:1120): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542001.219:1121): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171542001.228:1122): user pid=9933 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542001.228:1123): user pid=9933 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171542001.235:1124): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171542001.236:1125): user pid=9932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171542274.020:1126): avc:  denied  { write } for  pid=9971 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171542274.020:1126): avc:  denied  { add_name } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171542274.020:1126): avc:  denied  { create } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171542274.020:1126): arch=c000003e syscall=2 success=yes exit=6 a0=61b670 a1=c1 a2=124 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171542274.021:1127): avc:  denied  { write } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171542274.021:1127): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171542274.021:1127):  path="/home/dhighley/_zbC.CEF1FB.douglas"
>type=AVC msg=audit(1171542274.021:1128): avc:  denied  { getattr } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171542274.021:1128): arch=c000003e syscall=4 success=yes exit=0 a0=61b670 a1=7fff8206ecd0 a2=7fff8206ecd0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171542274.021:1128):  path="/home/dhighley/_zbC.CEF1FB.douglas"
>type=AVC msg=audit(1171542274.021:1129): avc:  denied  { link } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171542274.021:1129): arch=c000003e syscall=86 success=yes exit=0 a0=61b670 a1=61d010 a2=7fff8206ebf0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171542274.021:1130): avc:  denied  { remove_name } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171542274.021:1130): avc:  denied  { unlink } for  pid=9971 comm="procmail" name="_zbC.CEF1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171542274.021:1130): arch=c000003e syscall=87 success=yes exit=0 a0=61b670 a1=61d010 a2=7fff8206ebf0 a3=61b670 items=0 ppid=9966 pid=9971 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171542301.553:1131): user pid=9980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542301.554:1132): login pid=9980 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171542301.558:1133): user pid=9980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542301.558:1134): user pid=9980 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171542601.872:1135): user pid=10015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542601.873:1136): login pid=10015 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171542601.875:1137): user pid=10016 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542601.875:1138): login pid=10016 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171542601.877:1139): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542601.877:1140): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171542601.882:1141): user pid=10016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542601.882:1142): user pid=10016 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171542601.893:1143): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171542601.893:1144): user pid=10015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171542901.201:1145): user pid=10053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171542901.201:1146): login pid=10053 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171542901.205:1147): user pid=10053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171542901.205:1148): user pid=10053 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171543169.833:1149): avc:  denied  { getattr } for  pid=10095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171543169.833:1149): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff80950850 a2=7fff80950850 a3=6c6280 items=0 ppid=3451 pid=10095 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171543169.833:1149):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171543169.833:1150): avc:  denied  { read } for  pid=10095 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171543169.833:1150): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=10095 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171543174.798:1151): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171543174.798:1151): arch=c000003e syscall=62 success=yes exit=0 a0=276f a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171543174.806:1152): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171543174.806:1152): arch=c000003e syscall=2 success=yes exit=8 a0=33e2170 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171543201.524:1153): user pid=10098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171543201.524:1154): login pid=10098 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171543201.526:1155): user pid=10099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171543201.526:1156): login pid=10099 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171543201.528:1157): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171543201.528:1158): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171543201.531:1159): user pid=10099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171543201.532:1160): user pid=10099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171543201.559:1161): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171543201.559:1162): user pid=10098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171543501.858:1163): user pid=10140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171543501.859:1164): login pid=10140 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171543501.861:1165): user pid=10140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171543501.862:1166): user pid=10140 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171543801.179:1167): user pid=10175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171543801.179:1168): login pid=10175 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171543801.181:1169): user pid=10176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171543801.181:1170): login pid=10176 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171543801.183:1171): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171543801.183:1172): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171543801.186:1173): user pid=10176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171543801.186:1174): user pid=10176 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171543801.210:1175): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171543801.210:1176): user pid=10175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171544101.512:1177): user pid=10211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171544101.512:1178): login pid=10211 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171544101.515:1179): user pid=10211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171544101.515:1180): user pid=10211 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171544280.622:1181): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544280.622:1181): arch=c000003e syscall=2 success=yes exit=11 a0=32e6ad0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171544280.622:1182): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544280.622:1182): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171544280.622:1182):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171544280.628:1183): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544280.628:1183): arch=c000003e syscall=2 success=yes exit=8 a0=33d4240 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171544281.604:1184): avc:  denied  { search } for  pid=10245 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171544281.604:1184): avc:  denied  { write } for  pid=10245 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171544281.604:1184): avc:  denied  { add_name } for  pid=10245 comm="pyzor" name="TiJvRI" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171544281.604:1184): avc:  denied  { create } for  pid=10245 comm="pyzor" name="TiJvRI" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544281.604:1184): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171544281.604:1185): avc:  denied  { getattr } for  pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544281.604:1185): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb3176970 a2=7fffb3176970 a3=2 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171544281.604:1185):  path="/tmp/TiJvRI"
>type=AVC msg=audit(1171544281.604:1186): avc:  denied  { write } for  pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544281.604:1186): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf9e4 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171544281.604:1186):  path="/tmp/TiJvRI"
>type=AVC msg=audit(1171544281.604:1187): avc:  denied  { remove_name } for  pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171544281.604:1187): avc:  denied  { unlink } for  pid=10245 comm="pyzor" name="TiJvRI" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544281.604:1187): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171544281.606:1188): avc:  denied  { read } for  pid=10245 comm="pyzor" name="tmpxSL7e-" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544281.606:1188): arch=c000003e syscall=0 success=yes exit=681 a0=4 a1=2aaaaf34d000 a2=1000 a3=9c items=0 ppid=3451 pid=10245 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171544281.606:1188):  path=2F746D702F746D7078534C37652D202864656C6574656429
>type=AVC msg=audit(1171544286.797:1189): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544286.797:1189): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171544286.797:1189):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171544286.797:1190): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544286.797:1190): arch=c000003e syscall=86 success=yes exit=0 a0=32a6280 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171544286.797:1191): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544286.797:1191): arch=c000003e syscall=87 success=yes exit=0 a0=32a6280 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171544286.840:1192): avc:  denied  { append } for  pid=10241 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171544286.840:1192): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=2 items=0 ppid=10236 pid=10241 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171544401.846:1193): user pid=30587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171544401.846:1194): login pid=30587 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171544401.849:1195): user pid=30588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171544401.849:1196): login pid=30588 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171544401.851:1197): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171544401.851:1198): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171544401.860:1199): user pid=30588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171544401.860:1200): user pid=30588 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171544401.913:1201): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171544401.913:1202): user pid=30587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171544408.049:1203): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171544408.049:1204): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171544461.054:1205): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171544461.054:1206): login pid=30666 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171544461.057:1207): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171544461.057:1208): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171544461.964:1209): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171544461.965:1210): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171544701.971:1211): user pid=30706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171544701.972:1212): login pid=30706 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171544701.974:1213): user pid=30706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171544701.974:1214): user pid=30706 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171545001.298:1215): user pid=30747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545001.298:1216): login pid=30747 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171545001.299:1217): user pid=30746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545001.299:1218): login pid=30746 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171545001.302:1219): user pid=30747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545001.302:1220): user pid=30747 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171545001.307:1221): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545001.307:1222): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171545001.327:1223): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171545001.327:1224): user pid=30746 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171545190.118:1225): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171545190.119:1226): user pid=9196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171545301.124:1227): user pid=30784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545301.124:1228): login pid=30784 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171545301.127:1229): user pid=30784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545301.127:1230): user pid=30784 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171545601.456:1231): user pid=30819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545601.456:1232): login pid=30819 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171545601.458:1233): user pid=30820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545601.458:1234): login pid=30820 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171545601.460:1235): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545601.460:1236): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171545601.463:1237): user pid=30820 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545601.463:1238): user pid=30820 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171545601.479:1239): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171545601.480:1240): user pid=30819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171545901.789:1241): user pid=30859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171545901.789:1242): login pid=30859 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171545901.793:1243): user pid=30859 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171545901.793:1244): user pid=30859 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171545911.644:1245): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545911.644:1245): arch=c000003e syscall=2 success=yes exit=11 a0=32f41a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545911.644:1246): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545911.644:1246): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545911.644:1246):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171545911.650:1247): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545911.650:1247): arch=c000003e syscall=2 success=yes exit=8 a0=3286700 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545916.462:1248): avc:  denied  { search } for  pid=30881 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171545916.462:1248): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171545916.462:1249): avc:  denied  { getattr } for  pid=30881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.462:1249): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd855d460 a2=7fffd855d460 a3=6c6280 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545916.462:1249):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171545916.462:1250): avc:  denied  { read } for  pid=30881 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.462:1250): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171545916.463:1251): avc:  denied  { search } for  pid=30881 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171545916.463:1251): avc:  denied  { write } for  pid=30881 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171545916.463:1251): avc:  denied  { add_name } for  pid=30881 comm="pyzor" name="4tKMz7" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171545916.463:1251): avc:  denied  { create } for  pid=30881 comm="pyzor" name="4tKMz7" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.463:1251): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171545916.464:1252): avc:  denied  { getattr } for  pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.464:1252): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd855b950 a2=7fffd855b950 a3=3 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545916.464:1252):  path="/tmp/4tKMz7"
>type=AVC msg=audit(1171545916.464:1253): avc:  denied  { write } for  pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.464:1253): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158f4 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545916.464:1253):  path="/tmp/4tKMz7"
>type=AVC msg=audit(1171545916.465:1254): avc:  denied  { remove_name } for  pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171545916.465:1254): avc:  denied  { unlink } for  pid=30881 comm="pyzor" name="4tKMz7" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.465:1254): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171545916.480:1255): avc:  denied  { read } for  pid=30881 comm="pyzor" name="tmpvP0wIs" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545916.480:1255): arch=c000003e syscall=0 success=yes exit=816 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=30881 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545916.480:1255):  path=2F746D702F746D70765030774973202864656C6574656429
>type=AVC msg=audit(1171545921.425:1256): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171545921.425:1256): arch=c000003e syscall=62 success=yes exit=0 a0=78a1 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545923.439:1257): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.439:1257): arch=c000003e syscall=16 success=no exit=-25 a0=8 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545923.439:1257):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171545923.440:1258): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.440:1258): arch=c000003e syscall=86 success=yes exit=0 a0=3375bd0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545923.440:1259): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.440:1259): arch=c000003e syscall=87 success=yes exit=0 a0=3375bd0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545923.441:1260): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.441:1260): arch=c000003e syscall=2 success=yes exit=8 a0=333d7e0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171545923.485:1261): avc:  denied  { write } for  pid=30877 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171545923.485:1261): avc:  denied  { add_name } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171545923.485:1261): avc:  denied  { create } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.485:1261): arch=c000003e syscall=2 success=yes exit=6 a0=61c970 a1=c1 a2=124 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171545923.485:1262): avc:  denied  { write } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.485:1262): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545923.485:1262):  path="/home/dhighley/_diH.D9F1FB.douglas"
>type=AVC msg=audit(1171545923.486:1263): avc:  denied  { getattr } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.486:1263): arch=c000003e syscall=4 success=yes exit=0 a0=61c970 a1=7fffc4157b50 a2=7fffc4157b50 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171545923.486:1263):  path="/home/dhighley/_diH.D9F1FB.douglas"
>type=AVC msg=audit(1171545923.486:1264): avc:  denied  { link } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.486:1264): arch=c000003e syscall=86 success=yes exit=0 a0=61c970 a1=61b520 a2=7fffc4157a70 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171545923.486:1265): avc:  denied  { remove_name } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171545923.486:1265): avc:  denied  { unlink } for  pid=30877 comm="procmail" name="_diH.D9F1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.486:1265): arch=c000003e syscall=87 success=yes exit=0 a0=61c970 a1=61b520 a2=7fffc4157a70 a3=61c970 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171545923.486:1266): avc:  denied  { append } for  pid=30877 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171545923.486:1266): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=30872 pid=30877 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171546201.118:1267): user pid=30905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171546201.118:1268): login pid=30905 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171546201.120:1269): user pid=30906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171546201.120:1270): login pid=30906 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171546201.122:1271): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171546201.122:1272): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171546201.125:1273): user pid=30906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171546201.125:1274): user pid=30906 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171546201.141:1275): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171546201.141:1276): user pid=30905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171546501.457:1277): user pid=30945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171546501.457:1278): login pid=30945 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171546501.461:1279): user pid=30945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171546501.461:1280): user pid=30945 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171546801.781:1281): user pid=30978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171546801.781:1282): login pid=30978 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171546801.782:1283): user pid=30979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171546801.783:1284): login pid=30979 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171546801.787:1285): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171546801.788:1286): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171546801.792:1287): user pid=30979 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171546801.792:1288): user pid=30979 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171546801.806:1289): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171546801.807:1290): user pid=30978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171547101.123:1291): user pid=31013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171547101.123:1292): login pid=31013 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171547101.126:1293): user pid=31013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171547101.126:1294): user pid=31013 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171547401.453:1295): user pid=31051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171547401.453:1296): login pid=31051 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171547401.455:1297): user pid=31052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171547401.455:1298): login pid=31052 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171547401.457:1299): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171547401.457:1300): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171547401.460:1301): user pid=31052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171547401.460:1302): user pid=31052 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171547401.473:1303): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171547401.473:1304): user pid=31051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171547461.579:1305): avc:  denied  { search } for  pid=31077 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171547461.579:1305): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31077 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171547466.649:1306): avc:  denied  { write } for  pid=31073 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171547466.649:1306): avc:  denied  { add_name } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171547466.649:1306): avc:  denied  { create } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547466.649:1306): arch=c000003e syscall=2 success=yes exit=6 a0=61ca20 a1=c1 a2=124 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171547466.650:1307): avc:  denied  { write } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547466.650:1307): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171547466.650:1307):  path="/home/dhighley/_hlH.KVG1FB.douglas"
>type=AVC msg=audit(1171547466.650:1308): avc:  denied  { getattr } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547466.650:1308): arch=c000003e syscall=4 success=yes exit=0 a0=61ca20 a1=7fff09d05700 a2=7fff09d05700 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171547466.650:1308):  path="/home/dhighley/_hlH.KVG1FB.douglas"
>type=AVC msg=audit(1171547466.650:1309): avc:  denied  { link } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547466.650:1309): arch=c000003e syscall=86 success=yes exit=0 a0=61ca20 a1=61b510 a2=7fff09d05620 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171547466.650:1310): avc:  denied  { remove_name } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171547466.650:1310): avc:  denied  { unlink } for  pid=31073 comm="procmail" name="_hlH.KVG1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547466.650:1310): arch=c000003e syscall=87 success=yes exit=0 a0=61ca20 a1=61b510 a2=7fff09d05620 a3=61ca20 items=0 ppid=31068 pid=31073 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171547701.785:1311): user pid=31099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171547701.785:1312): login pid=31099 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171547701.787:1313): user pid=31099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171547701.787:1314): user pid=31099 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171547995.118:1315): avc:  denied  { getattr } for  pid=31147 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547995.118:1315): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0915a050 a2=7fff0915a050 a3=6c6280 items=0 ppid=3451 pid=31147 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171547995.118:1315):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171547995.118:1316): avc:  denied  { read } for  pid=31147 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171547995.118:1316): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31147 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171548001.119:1317): user pid=31148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548001.119:1318): login pid=31148 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171548001.121:1319): user pid=31149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548001.121:1320): login pid=31149 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171548001.123:1321): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548001.123:1322): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548001.126:1323): user pid=31150 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548001.126:1324): login pid=31150 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171548001.127:1325): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548001.127:1326): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171548001.136:1327): user pid=31150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548001.137:1328): user pid=31150 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171548001.150:1329): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171548001.150:1330): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548061.458:1331): user pid=31170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548061.459:1332): login pid=31170 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171548061.463:1333): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548061.463:1334): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171548062.345:1335): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171548062.346:1336): user pid=31170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548301.353:1337): user pid=31209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548301.354:1338): login pid=31209 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171548301.356:1339): user pid=31209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548301.356:1340): user pid=31209 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548601.684:1341): user pid=31256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548601.685:1342): user pid=31255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548601.685:1343): login pid=31256 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171548601.685:1344): login pid=31255 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171548601.690:1345): user pid=31256 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548601.690:1346): user pid=31256 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171548601.695:1347): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548601.695:1348): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171548601.717:1349): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171548601.718:1350): user pid=31255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171548901.016:1351): user pid=31291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171548901.016:1352): login pid=31291 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171548901.019:1353): user pid=31291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171548901.020:1354): user pid=31291 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171549201.346:1355): user pid=31327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171549201.346:1356): login pid=31327 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171549201.348:1357): user pid=31328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171549201.349:1358): login pid=31328 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171549201.350:1359): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171549201.351:1360): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171549201.354:1361): user pid=31328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171549201.354:1362): user pid=31328 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171549201.367:1363): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171549201.367:1364): user pid=31327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171549501.679:1365): user pid=31367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171549501.679:1366): login pid=31367 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171549501.682:1367): user pid=31367 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171549501.682:1368): user pid=31367 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171549634.204:1369): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.204:1369): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549634.204:1369):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171549634.204:1370): avc:  denied  { link } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.204:1370): arch=c000003e syscall=86 success=yes exit=0 a0=30b0580 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549634.204:1371): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.204:1371): arch=c000003e syscall=87 success=yes exit=0 a0=30b0580 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549634.206:1372): avc:  denied  { write } for  pid=3451 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.206:1372): arch=c000003e syscall=2 success=yes exit=8 a0=2ac55d0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549634.206:1373): avc:  denied  { setattr } for  pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.206:1373): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32860 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549634.207:1374): avc:  denied  { rename } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.207:1374): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549634.207:1375): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.207:1375): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549634.207:1375):  path="/home/dhighley/.spamassassin/bayes_journal.old"
>type=AVC msg=audit(1171549634.466:1376): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549634.466:1376): arch=c000003e syscall=87 success=yes exit=0 a0=31ab9e0 a1=1de95d0 a2=37a0b12b60 a3=3075040 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549641.240:1377): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549641.240:1377): arch=c000003e syscall=1 success=yes exit=1896 a0=9 a1=30aec90 a2=768 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549641.240:1377):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171549641.250:1378): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549641.250:1378): arch=c000003e syscall=2 success=yes exit=8 a0=31e70a0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171549646.296:1379): avc:  denied  { search } for  pid=31401 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171549646.296:1379): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171549646.296:1380): avc:  denied  { getattr } for  pid=31401 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.296:1380): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff0f0fbff0 a2=7fff0f0fbff0 a3=6c6280 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549646.296:1380):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171549646.296:1381): avc:  denied  { read } for  pid=31401 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.296:1381): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171549646.297:1382): avc:  denied  { search } for  pid=31401 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171549646.297:1382): avc:  denied  { write } for  pid=31401 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171549646.297:1382): avc:  denied  { add_name } for  pid=31401 comm="pyzor" name="j1G-94" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171549646.297:1382): avc:  denied  { create } for  pid=31401 comm="pyzor" name="j1G-94" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.297:1382): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171549646.298:1383): avc:  denied  { getattr } for  pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.298:1383): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff0f0fa8f0 a2=7fff0f0fa8f0 a3=2 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549646.298:1383):  path="/tmp/j1G-94"
>type=AVC msg=audit(1171549646.298:1384): avc:  denied  { write } for  pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.298:1384): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549646.298:1384):  path="/tmp/j1G-94"
>type=AVC msg=audit(1171549646.298:1385): avc:  denied  { remove_name } for  pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171549646.298:1385): avc:  denied  { unlink } for  pid=31401 comm="pyzor" name="j1G-94" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.298:1385): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171549646.300:1386): avc:  denied  { read } for  pid=31401 comm="pyzor" name="tmphpDHPu" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171549646.300:1386): arch=c000003e syscall=0 success=yes exit=532 a0=4 a1=2aaaaf34d000 a2=1000 a3=5d items=0 ppid=3451 pid=31401 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171549646.300:1386):  path=2F746D702F746D70687044485075202864656C6574656429
>type=AVC msg=audit(1171549651.261:1387): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171549651.261:1387): arch=c000003e syscall=62 success=yes exit=0 a0=7aa9 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171549801.008:1388): user pid=31414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171549801.008:1389): login pid=31414 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171549801.009:1390): user pid=31413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171549801.009:1391): login pid=31413 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171549801.011:1392): user pid=31414 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171549801.012:1393): user pid=31414 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171549801.016:1394): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171549801.016:1395): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171549801.035:1396): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171549801.036:1397): user pid=31413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171550101.333:1398): user pid=31453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171550101.333:1399): login pid=31453 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171550101.336:1400): user pid=31453 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171550101.336:1401): user pid=31453 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171550401.656:1402): user pid=31488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171550401.656:1403): login pid=31488 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171550401.658:1404): user pid=31489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171550401.658:1405): login pid=31489 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171550401.660:1406): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171550401.660:1407): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171550401.662:1408): user pid=31489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171550401.662:1409): user pid=31489 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171550401.680:1410): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171550401.681:1411): user pid=31488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171550701.986:1412): user pid=31523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171550701.986:1413): login pid=31523 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171550701.989:1414): user pid=31523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171550701.989:1415): user pid=31523 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171551001.324:1416): user pid=31558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551001.324:1417): login pid=31558 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171551001.326:1418): user pid=31559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551001.326:1419): login pid=31559 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171551001.328:1420): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551001.328:1421): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171551001.331:1422): user pid=31559 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551001.331:1423): user pid=31559 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171551001.350:1424): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171551001.351:1425): user pid=31558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171551025.251:1426): avc:  denied  { write } for  pid=31577 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171551025.251:1426): avc:  denied  { add_name } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171551025.251:1426): avc:  denied  { create } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.251:1426): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171551025.252:1427): avc:  denied  { write } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.252:1427): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551025.252:1427):  path="/home/dhighley/_ZtH.xMH1FB.douglas"
>type=AVC msg=audit(1171551025.252:1428): avc:  denied  { getattr } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.252:1428): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff4dffd9f0 a2=7fff4dffd9f0 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551025.252:1428):  path="/home/dhighley/_ZtH.xMH1FB.douglas"
>type=AVC msg=audit(1171551025.252:1429): avc:  denied  { link } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.252:1429): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61f7f0 a2=7fff4dffd910 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171551025.252:1430): avc:  denied  { remove_name } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171551025.252:1430): avc:  denied  { unlink } for  pid=31577 comm="procmail" name="_ZtH.xMH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.252:1430): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61f7f0 a2=7fff4dffd910 a3=61b650 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171551025.252:1431): avc:  denied  { append } for  pid=31577 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551025.252:1431): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31574 pid=31577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171551180.546:1432): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171551180.547:1433): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171551180.556:1434): user pid=31597 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171551180.557:1435): login pid=31597 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171551180.557:1436): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171551180.625:1437): user pid=31600 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)'
>type=CRED_REFR msg=audit(1171551180.634:1438): user pid=31600 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1171551222.041:1439): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171551222.042:1440): user pid=31597 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171551301.666:1441): user pid=31655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551301.666:1442): login pid=31655 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171551301.669:1443): user pid=31655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551301.669:1444): user pid=31655 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171551333.982:1445): user pid=31669 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171551333.985:1446): user pid=31669 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171551333.986:1447): login pid=31669 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171551333.986:1448): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171551333.995:1449): user pid=31674 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171551334.086:1450): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1171551548.520:1451): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171551548.520:1452): user pid=31669 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171551601.004:1453): user pid=31741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551601.005:1454): login pid=31741 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171551601.007:1455): user pid=31742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551601.007:1456): login pid=31742 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171551601.009:1457): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551601.009:1458): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171551601.012:1459): user pid=31742 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551601.012:1460): user pid=31742 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171551601.030:1461): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171551601.030:1462): user pid=31741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171551661.348:1463): user pid=31756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551661.348:1464): login pid=31756 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171551661.352:1465): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551661.353:1466): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171551662.241:1467): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171551662.242:1468): user pid=31756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171551877.468:1469): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551877.468:1469): arch=c000003e syscall=2 success=yes exit=8 a0=341f120 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171551877.471:1470): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551877.471:1470): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551877.471:1470):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171551878.651:1471): avc:  denied  { search } for  pid=31806 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171551878.651:1471): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171551878.651:1472): avc:  denied  { getattr } for  pid=31806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.651:1472): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd7153260 a2=7fffd7153260 a3=6c6280 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551878.651:1472):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171551878.651:1473): avc:  denied  { read } for  pid=31806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.651:1473): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171551878.653:1474): avc:  denied  { search } for  pid=31806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171551878.653:1474): avc:  denied  { write } for  pid=31806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171551878.653:1474): avc:  denied  { add_name } for  pid=31806 comm="pyzor" name="34HpCH" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171551878.653:1474): avc:  denied  { create } for  pid=31806 comm="pyzor" name="34HpCH" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.653:1474): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171551878.653:1475): avc:  denied  { getattr } for  pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.653:1475): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd71510d0 a2=7fffd71510d0 a3=3 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551878.653:1475):  path="/tmp/34HpCH"
>type=AVC msg=audit(1171551878.653:1476): avc:  denied  { write } for  pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.653:1476): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef159b4 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551878.653:1476):  path="/tmp/34HpCH"
>type=AVC msg=audit(1171551878.653:1477): avc:  denied  { remove_name } for  pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171551878.653:1477): avc:  denied  { unlink } for  pid=31806 comm="pyzor" name="34HpCH" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.653:1477): arch=c000003e syscall=87 success=yes exit=0 a0=6d9f30 a1=622660 a2=37a8f2f4d8 a3=6d9f30 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171551878.655:1478): avc:  denied  { read } for  pid=31806 comm="pyzor" name="tmpyQ6cIU" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551878.655:1478): arch=c000003e syscall=0 success=yes exit=1555 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=31806 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171551878.655:1478):  path=2F746D702F746D70795136634955202864656C6574656429
>type=AVC msg=audit(1171551883.612:1479): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171551883.612:1479): arch=c000003e syscall=62 success=yes exit=0 a0=7c3e a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171551884.026:1480): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171551884.026:1480): arch=c000003e syscall=2 success=yes exit=8 a0=341a790 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171551901.249:1481): user pid=31810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171551901.250:1482): login pid=31810 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171551901.253:1483): user pid=31810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171551901.253:1484): user pid=31810 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171552201.587:1485): user pid=31844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171552201.587:1486): login pid=31844 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171552201.590:1487): user pid=31845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171552201.590:1488): login pid=31845 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171552201.591:1489): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171552201.591:1490): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171552201.595:1491): user pid=31845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171552201.595:1492): user pid=31845 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171552201.619:1493): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171552201.620:1494): user pid=31844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171552461.255:1495): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552461.255:1495): arch=c000003e syscall=2 success=yes exit=11 a0=3080f20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171552461.255:1496): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552461.255:1496): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552461.255:1496):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171552461.264:1497): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552461.264:1497): arch=c000003e syscall=2 success=yes exit=8 a0=33d1030 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171552461.266:1498): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552461.266:1498): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552461.266:1498):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171552466.309:1499): avc:  denied  { search } for  pid=31892 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171552466.309:1499): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171552466.310:1500): avc:  denied  { search } for  pid=31892 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171552466.310:1500): avc:  denied  { write } for  pid=31892 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171552466.310:1500): avc:  denied  { add_name } for  pid=31892 comm="pyzor" name="4jTuY0" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171552466.310:1500): avc:  denied  { create } for  pid=31892 comm="pyzor" name="4jTuY0" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552466.310:1500): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171552466.311:1501): avc:  denied  { getattr } for  pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552466.311:1501): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9813f7c0 a2=7fff9813f7c0 a3=3 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552466.311:1501):  path="/tmp/4jTuY0"
>type=AVC msg=audit(1171552466.312:1502): avc:  denied  { write } for  pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552466.312:1502): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552466.312:1502):  path="/tmp/4jTuY0"
>type=AVC msg=audit(1171552466.312:1503): avc:  denied  { remove_name } for  pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171552466.312:1503): avc:  denied  { unlink } for  pid=31892 comm="pyzor" name="4jTuY0" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552466.312:1503): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171552466.318:1504): avc:  denied  { read } for  pid=31892 comm="pyzor" name="tmpU1iN2k" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552466.318:1504): arch=c000003e syscall=0 success=yes exit=647 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=31892 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552466.318:1504):  path=2F746D702F746D705531694E326B202864656C6574656429
>type=AVC msg=audit(1171552471.284:1505): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.284:1505): arch=c000003e syscall=86 success=yes exit=0 a0=326f090 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171552471.284:1506): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.284:1506): arch=c000003e syscall=87 success=yes exit=0 a0=326f090 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171552471.285:1507): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.285:1507): arch=c000003e syscall=2 success=yes exit=9 a0=30ae020 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171552471.307:1508): avc:  denied  { write } for  pid=31887 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171552471.307:1508): avc:  denied  { add_name } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171552471.307:1508): avc:  denied  { create } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.307:1508): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171552471.307:1509): avc:  denied  { write } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.307:1509): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552471.307:1509):  path="/home/dhighley/_PyH.XjH1FB.douglas"
>type=AVC msg=audit(1171552471.307:1510): avc:  denied  { getattr } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.307:1510): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff060c3ac0 a2=7fff060c3ac0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171552471.307:1510):  path="/home/dhighley/_PyH.XjH1FB.douglas"
>type=AVC msg=audit(1171552471.307:1511): avc:  denied  { link } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.307:1511): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff060c39e0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171552471.308:1512): avc:  denied  { remove_name } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171552471.308:1512): avc:  denied  { unlink } for  pid=31887 comm="procmail" name="_PyH.XjH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.308:1512): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61cf20 a2=7fff060c39e0 a3=61b650 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171552471.308:1513): avc:  denied  { append } for  pid=31887 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171552471.308:1513): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=31882 pid=31887 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171552501.919:1514): user pid=31895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171552501.919:1515): login pid=31895 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171552501.921:1516): user pid=31895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171552501.921:1517): user pid=31895 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171552801.256:1518): user pid=31950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171552801.257:1519): user pid=31949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171552801.257:1520): login pid=31950 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171552801.257:1521): login pid=31949 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171552801.262:1522): user pid=31950 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171552801.262:1523): user pid=31950 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171552801.266:1524): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171552801.266:1525): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171552801.287:1526): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171552801.287:1527): user pid=31949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171553082.963:1528): avc:  denied  { write } for  pid=31994 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171553082.963:1528): avc:  denied  { add_name } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171553082.963:1528): avc:  denied  { create } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171553082.963:1528): arch=c000003e syscall=2 success=yes exit=6 a0=61e000 a1=c1 a2=124 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171553082.963:1529): avc:  denied  { write } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171553082.963:1529): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171553082.963:1529):  path="/home/dhighley/_6zH.6sH1FB.douglas"
>type=AVC msg=audit(1171553082.963:1530): avc:  denied  { getattr } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171553082.963:1530): arch=c000003e syscall=4 success=yes exit=0 a0=61e000 a1=7fff95287c90 a2=7fff95287c90 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171553082.963:1530):  path="/home/dhighley/_6zH.6sH1FB.douglas"
>type=AVC msg=audit(1171553082.963:1531): avc:  denied  { link } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171553082.963:1531): arch=c000003e syscall=86 success=yes exit=0 a0=61e000 a1=61e200 a2=7fff95287bb0 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171553082.964:1532): avc:  denied  { remove_name } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171553082.964:1532): avc:  denied  { unlink } for  pid=31994 comm="procmail" name="_6zH.6sH1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171553082.964:1532): arch=c000003e syscall=87 success=yes exit=0 a0=61e000 a1=61e200 a2=7fff95287bb0 a3=61e000 items=0 ppid=31989 pid=31994 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171553101.586:1533): user pid=32001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171553101.586:1534): login pid=32001 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171553101.588:1535): user pid=32001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171553101.588:1536): user pid=32001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171553401.918:1537): user pid=32033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171553401.918:1538): login pid=32033 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171553401.920:1539): user pid=32034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171553401.920:1540): login pid=32034 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171553401.922:1541): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171553401.922:1542): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171553401.927:1543): user pid=32034 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171553401.927:1544): user pid=32034 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171553401.943:1545): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171553401.943:1546): user pid=32033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171553701.257:1547): user pid=32071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171553701.257:1548): login pid=32071 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171553701.261:1549): user pid=32071 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171553701.261:1550): user pid=32071 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171554001.585:1551): user pid=32108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554001.585:1552): login pid=32108 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171554001.587:1553): user pid=32109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554001.587:1554): login pid=32109 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171554001.589:1555): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554001.589:1556): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171554001.593:1557): user pid=32109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554001.593:1558): user pid=32109 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171554001.610:1559): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171554001.610:1560): user pid=32108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171554301.925:1561): user pid=32154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554301.925:1562): login pid=32154 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171554301.928:1563): user pid=32154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554301.928:1564): user pid=32154 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171554370.780:1565): avc:  denied  { getattr } for  pid=32178 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171554370.780:1565): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff94c15b10 a2=7fff94c15b10 a3=6c6280 items=0 ppid=3451 pid=32178 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171554370.780:1565):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171554370.780:1566): avc:  denied  { read } for  pid=32178 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171554370.780:1566): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=32178 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171554375.743:1567): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171554375.743:1567): arch=c000003e syscall=62 success=yes exit=0 a0=7db2 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171554601.251:1568): user pid=32197 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554601.251:1569): login pid=32197 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171554601.253:1570): user pid=32198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554601.254:1571): login pid=32198 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171554601.257:1572): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554601.257:1573): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171554601.260:1574): user pid=32198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554601.260:1575): user pid=32198 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171554601.275:1576): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171554601.275:1577): user pid=32197 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171554901.598:1578): user pid=32234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171554901.598:1579): login pid=32234 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171554901.601:1580): user pid=32234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171554901.601:1581): user pid=32234 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171555201.922:1582): user pid=32268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555201.922:1583): login pid=32268 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171555201.924:1584): user pid=32269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555201.924:1585): login pid=32269 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171555201.925:1586): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555201.925:1587): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171555201.933:1588): user pid=32269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555201.933:1589): user pid=32269 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171555201.944:1590): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171555201.944:1591): user pid=32268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171555261.262:1592): user pid=32286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555261.262:1593): login pid=32286 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171555261.266:1594): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555261.266:1595): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171555262.158:1596): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171555262.159:1597): user pid=32286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171555501.165:1598): user pid=32325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555501.165:1599): login pid=32325 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171555501.168:1600): user pid=32325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555501.168:1601): user pid=32325 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171555801.489:1602): user pid=32361 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555801.489:1603): login pid=32361 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171555801.492:1604): user pid=32362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171555801.492:1605): login pid=32362 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171555801.495:1606): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555801.495:1607): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171555801.497:1608): user pid=32362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171555801.497:1609): user pid=32362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171555801.522:1610): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171555801.523:1611): user pid=32361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171555856.914:1612): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555856.914:1612): arch=c000003e syscall=2 success=yes exit=11 a0=33d1320 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171555856.914:1613): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555856.914:1613): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171555856.914:1613):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171555856.922:1614): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555856.922:1614): arch=c000003e syscall=2 success=yes exit=8 a0=c24800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171555856.924:1615): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555856.924:1615): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171555856.924:1615):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171555857.704:1616): avc:  denied  { search } for  pid=32388 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171555857.704:1616): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171555857.705:1617): avc:  denied  { search } for  pid=32388 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171555857.705:1617): avc:  denied  { write } for  pid=32388 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171555857.705:1617): avc:  denied  { add_name } for  pid=32388 comm="pyzor" name="HCQDxv" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171555857.705:1617): avc:  denied  { create } for  pid=32388 comm="pyzor" name="HCQDxv" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555857.705:1617): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171555857.706:1618): avc:  denied  { getattr } for  pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555857.706:1618): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc74fc8e0 a2=7fffc74fc8e0 a3=3 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171555857.706:1618):  path="/tmp/HCQDxv"
>type=AVC msg=audit(1171555857.706:1619): avc:  denied  { write } for  pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555857.706:1619): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171555857.706:1619):  path="/tmp/HCQDxv"
>type=AVC msg=audit(1171555857.706:1620): avc:  denied  { remove_name } for  pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171555857.706:1620): avc:  denied  { unlink } for  pid=32388 comm="pyzor" name="HCQDxv" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555857.706:1620): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171555857.708:1621): avc:  denied  { read } for  pid=32388 comm="pyzor" name="tmpykcE8U" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555857.708:1621): arch=c000003e syscall=0 success=yes exit=676 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=32388 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171555857.708:1621):  path=2F746D702F746D70796B63453855202864656C6574656429
>type=AVC msg=audit(1171555862.679:1622): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555862.679:1622): arch=c000003e syscall=86 success=yes exit=0 a0=3077330 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171555862.679:1623): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555862.679:1623): arch=c000003e syscall=87 success=yes exit=0 a0=3077330 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171555862.680:1624): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555862.680:1624): arch=c000003e syscall=2 success=yes exit=8 a0=321b720 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171555862.700:1625): avc:  denied  { append } for  pid=32384 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171555862.700:1625): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=32379 pid=32384 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1171555987.438:1626): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171555987.439:1627): user pid=31149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171556101.444:1628): user pid=32410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171556101.445:1629): login pid=32410 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171556101.448:1630): user pid=32410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171556101.448:1631): user pid=32410 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171556401.769:1632): user pid=32451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171556401.769:1633): login pid=32451 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171556401.771:1634): user pid=32452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171556401.771:1635): login pid=32452 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171556401.773:1636): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171556401.773:1637): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171556401.776:1638): user pid=32452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171556401.777:1639): user pid=32452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171556401.802:1640): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171556401.802:1641): user pid=32451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171556701.108:1642): user pid=32487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171556701.108:1643): login pid=32487 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171556701.111:1644): user pid=32487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171556701.111:1645): user pid=32487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171557001.434:1646): user pid=32520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557001.434:1647): login pid=32520 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171557001.437:1648): user pid=32521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557001.437:1649): login pid=32521 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171557001.438:1650): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557001.438:1651): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171557001.443:1652): user pid=32521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557001.444:1653): user pid=32521 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171557001.468:1654): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171557001.468:1655): user pid=32520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171557214.637:1656): avc:  denied  { write } for  pid=32555 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171557214.637:1656): avc:  denied  { add_name } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171557214.637:1656): avc:  denied  { create } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171557214.637:1656): arch=c000003e syscall=2 success=yes exit=6 a0=61c9b0 a1=c1 a2=124 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171557214.637:1657): avc:  denied  { write } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171557214.637:1657): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171557214.637:1657):  path="/home/dhighley/_r8H.etI1FB.douglas"
>type=AVC msg=audit(1171557214.637:1658): avc:  denied  { getattr } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171557214.637:1658): arch=c000003e syscall=4 success=yes exit=0 a0=61c9b0 a1=7fff6bc0f610 a2=7fff6bc0f610 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171557214.637:1658):  path="/home/dhighley/_r8H.etI1FB.douglas"
>type=AVC msg=audit(1171557214.637:1659): avc:  denied  { link } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171557214.637:1659): arch=c000003e syscall=86 success=yes exit=0 a0=61c9b0 a1=61b520 a2=7fff6bc0f530 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171557214.638:1660): avc:  denied  { remove_name } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171557214.638:1660): avc:  denied  { unlink } for  pid=32555 comm="procmail" name="_r8H.etI1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171557214.638:1660): arch=c000003e syscall=87 success=yes exit=0 a0=61c9b0 a1=61b520 a2=7fff6bc0f530 a3=61c9b0 items=0 ppid=32550 pid=32555 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171557301.777:1661): user pid=32569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557301.777:1662): login pid=32569 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171557301.780:1663): user pid=32569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557301.780:1664): user pid=32569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171557601.105:1665): user pid=32604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557601.105:1666): login pid=32604 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171557601.106:1667): user pid=32603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557601.106:1668): login pid=32603 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171557601.109:1669): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557601.109:1670): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171557601.111:1671): user pid=32604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557601.111:1672): user pid=32604 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171557601.137:1673): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171557601.137:1674): user pid=32603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171557901.437:1675): user pid=32638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171557901.437:1676): login pid=32638 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171557901.441:1677): user pid=32638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171557901.441:1678): user pid=32638 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171558201.763:1679): user pid=32674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558201.763:1680): login pid=32674 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171558201.764:1681): user pid=32673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558201.764:1682): login pid=32673 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171558201.767:1683): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558201.767:1684): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171558201.768:1685): user pid=32674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558201.768:1686): user pid=32674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171558201.783:1687): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171558201.784:1688): user pid=32673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171558501.106:1689): user pid=32717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558501.106:1690): login pid=32717 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171558501.110:1691): user pid=32717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558501.110:1692): user pid=32717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171558801.432:1693): user pid=32750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558801.432:1694): login pid=32750 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171558801.434:1695): user pid=32751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558801.434:1696): login pid=32751 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171558801.436:1697): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558801.436:1698): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171558801.439:1699): user pid=32752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558801.439:1700): login pid=32752 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171558801.440:1701): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558801.440:1702): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171558801.452:1703): user pid=32752 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558801.452:1704): user pid=32752 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171558801.457:1705): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171558801.457:1706): user pid=32750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171558861.770:1707): user pid=303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171558861.770:1708): login pid=303 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171558861.773:1709): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171558861.773:1710): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171558862.658:1711): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171558862.658:1712): user pid=303 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171559101.665:1713): user pid=343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171559101.665:1714): login pid=343 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171559101.668:1715): user pid=343 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171559101.668:1716): user pid=343 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171559401.994:1717): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171559401.994:1718): login pid=378 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171559401.997:1719): user pid=379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171559401.997:1720): login pid=379 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171559401.999:1721): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171559401.999:1722): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171559402.007:1723): user pid=379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171559402.007:1724): user pid=379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171559402.020:1725): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171559402.020:1726): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171559701.338:1727): user pid=424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171559701.338:1728): login pid=424 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171559701.341:1729): user pid=424 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171559701.341:1730): user pid=424 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171559746.493:1731): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171559746.493:1731): arch=c000003e syscall=2 success=yes exit=8 a0=32236d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171559746.495:1732): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171559746.495:1732): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171559746.495:1732):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171559747.823:1733): avc:  denied  { getattr } for  pid=444 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171559747.823:1733): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffde855750 a2=7fffde855750 a3=6c6280 items=0 ppid=3451 pid=444 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171559747.823:1733):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171559747.823:1734): avc:  denied  { read } for  pid=444 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171559747.823:1734): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=444 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171559752.786:1735): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171559752.786:1735): arch=c000003e syscall=62 success=yes exit=0 a0=1bc a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171559752.794:1736): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171559752.794:1736): arch=c000003e syscall=2 success=yes exit=8 a0=31b1cd0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171560001.660:1737): user pid=475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560001.661:1738): login pid=475 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171560001.662:1739): user pid=476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560001.662:1740): login pid=476 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171560001.667:1741): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560001.667:1742): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171560001.672:1743): user pid=476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560001.672:1744): user pid=476 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171560001.686:1745): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171560001.686:1746): user pid=475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171560301.995:1747): user pid=511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560301.995:1748): login pid=511 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171560302.000:1749): user pid=511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560302.000:1750): user pid=511 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171560601.320:1751): user pid=546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560601.320:1752): login pid=546 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171560601.320:1753): user pid=545 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560601.321:1754): login pid=545 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171560601.326:1755): user pid=546 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560601.326:1756): user pid=546 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171560601.332:1757): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560601.332:1758): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171560601.353:1759): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171560601.353:1760): user pid=545 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171560901.650:1761): user pid=587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171560901.650:1762): login pid=587 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171560901.653:1763): user pid=587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171560901.653:1764): user pid=587 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171561201.973:1765): user pid=622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171561201.973:1766): login pid=622 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171561201.974:1767): user pid=621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171561201.974:1768): login pid=621 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171561201.977:1769): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171561201.977:1770): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171561201.979:1771): user pid=622 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171561201.979:1772): user pid=622 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171561201.996:1773): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171561201.996:1774): user pid=621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171561501.303:1775): user pid=662 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171561501.304:1776): login pid=662 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171561501.308:1777): user pid=662 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171561501.308:1778): user pid=662 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171561774.126:1779): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561774.126:1779): arch=c000003e syscall=2 success=yes exit=11 a0=34166d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171561774.126:1780): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561774.126:1780): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561774.126:1780):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171561779.191:1781): avc:  denied  { search } for  pid=714 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171561779.191:1781): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171561779.192:1782): avc:  denied  { search } for  pid=714 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171561779.192:1782): avc:  denied  { write } for  pid=714 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171561779.192:1782): avc:  denied  { add_name } for  pid=714 comm="pyzor" name="0d5Nv1" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171561779.192:1782): avc:  denied  { create } for  pid=714 comm="pyzor" name="0d5Nv1" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.192:1782): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171561779.193:1783): avc:  denied  { getattr } for  pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.193:1783): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7ffff8668e60 a2=7ffff8668e60 a3=2 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561779.193:1783):  path="/tmp/0d5Nv1"
>type=AVC msg=audit(1171561779.193:1784): avc:  denied  { write } for  pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.193:1784): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561779.193:1784):  path="/tmp/0d5Nv1"
>type=AVC msg=audit(1171561779.193:1785): avc:  denied  { remove_name } for  pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171561779.193:1785): avc:  denied  { unlink } for  pid=714 comm="pyzor" name="0d5Nv1" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.193:1785): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171561779.231:1786): avc:  denied  { read } for  pid=714 comm="pyzor" name="tmpU_3IV2" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.231:1786): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=2761 items=0 ppid=3451 pid=714 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561779.231:1786):  path=2F746D702F746D70555F33495632202864656C6574656429
>type=AVC msg=audit(1171561779.342:1787): avc:  denied  { append } for  pid=3452 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561779.342:1787): arch=c000003e syscall=2 success=yes exit=12 a0=3265510 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3452 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171561784.410:1788): avc:  denied  { getattr } for  pid=716 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561784.410:1788): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff201ef0f0 a2=7fff201ef0f0 a3=6c6280 items=0 ppid=3452 pid=716 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561784.410:1788):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171561784.410:1789): avc:  denied  { read } for  pid=716 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561784.410:1789): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3452 pid=716 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171561786.239:1790): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561786.239:1790): arch=c000003e syscall=86 success=yes exit=0 a0=32186d0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171561786.240:1791): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561786.240:1791): arch=c000003e syscall=87 success=yes exit=0 a0=32186d0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171561786.300:1792): avc:  denied  { append } for  pid=700 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561786.300:1792): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=695 pid=700 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171561789.482:1793): avc:  denied  { getattr } for  pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561789.482:1793): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7ffff8276c30 a2=7ffff8276c30 a3=619453 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561789.482:1793):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171561789.483:1794): avc:  denied  { append } for  pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561789.483:1794): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171561789.483:1795): avc:  denied  { lock } for  pid=710 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171561789.483:1795): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=705 pid=710 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171561789.483:1795):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171561801.630:1796): user pid=719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171561801.631:1797): login pid=719 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171561801.633:1798): user pid=720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171561801.633:1799): login pid=720 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171561801.635:1800): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171561801.635:1801): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171561801.638:1802): user pid=720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171561801.638:1803): user pid=720 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171561801.655:1804): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171561801.656:1805): user pid=719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171562101.977:1806): user pid=757 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171562101.977:1807): login pid=757 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171562101.981:1808): user pid=757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171562101.981:1809): user pid=757 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171562401.303:1810): user pid=792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171562401.303:1812): login pid=792 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171562401.303:1811): user pid=791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171562401.303:1813): login pid=791 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171562401.309:1814): user pid=792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171562401.309:1815): user pid=792 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171562401.312:1816): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171562401.312:1817): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171562401.335:1818): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171562401.335:1819): user pid=791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171562461.636:1820): user pid=806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171562461.636:1821): login pid=806 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171562461.640:1822): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171562461.640:1823): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171562462.549:1824): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171562462.550:1825): user pid=806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171562701.556:1826): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171562701.557:1827): login pid=847 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171562701.560:1828): user pid=847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171562701.560:1829): user pid=847 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171562755.348:1830): avc:  denied  { write } for  pid=870 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171562755.348:1830): avc:  denied  { add_name } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171562755.348:1830): avc:  denied  { create } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171562755.348:1830): arch=c000003e syscall=2 success=yes exit=6 a0=61b460 a1=c1 a2=124 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171562755.349:1831): avc:  denied  { write } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171562755.349:1831): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171562755.349:1831):  path="/home/dhighley/_mN.DEK1FB.douglas"
>type=AVC msg=audit(1171562755.349:1832): avc:  denied  { getattr } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171562755.349:1832): arch=c000003e syscall=4 success=yes exit=0 a0=61b460 a1=7fff01848240 a2=7fff01848240 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171562755.349:1832):  path="/home/dhighley/_mN.DEK1FB.douglas"
>type=AVC msg=audit(1171562755.349:1833): avc:  denied  { link } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171562755.349:1833): arch=c000003e syscall=86 success=yes exit=0 a0=61b460 a1=61c890 a2=7fff01848160 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171562755.350:1834): avc:  denied  { remove_name } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171562755.350:1834): avc:  denied  { unlink } for  pid=870 comm="procmail" name="_mN.DEK1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171562755.350:1834): arch=c000003e syscall=87 success=yes exit=0 a0=61b460 a1=61c890 a2=7fff01848160 a3=61b460 items=0 ppid=862 pid=870 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171563001.884:1835): user pid=895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563001.884:1836): login pid=895 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171563001.887:1837): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563001.887:1838): login pid=896 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171563001.890:1839): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563001.890:1840): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171563001.892:1841): user pid=896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563001.892:1842): user pid=896 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171563001.915:1843): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171563001.915:1844): user pid=895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171563301.233:1845): user pid=939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563301.233:1846): login pid=939 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171563301.236:1847): user pid=939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563301.236:1848): user pid=939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171563549.101:1849): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563549.101:1849): arch=c000003e syscall=2 success=yes exit=8 a0=32bef70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171563549.103:1850): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563549.103:1850): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563549.103:1850):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171563551.910:1851): avc:  denied  { getattr } for  pid=985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563551.910:1851): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff54637530 a2=7fff54637530 a3=6c6280 items=0 ppid=3451 pid=985 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563551.910:1851):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171563551.910:1852): avc:  denied  { read } for  pid=985 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563551.910:1852): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=985 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171563552.102:1853): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563552.102:1853): arch=c000003e syscall=2 success=yes exit=8 a0=2fb5f60 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171563601.569:1854): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563601.570:1855): login pid=990 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171563601.572:1856): user pid=991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563601.572:1857): login pid=991 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171563601.576:1858): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563601.576:1859): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171563601.579:1860): user pid=991 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563601.579:1861): user pid=991 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171563601.596:1862): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171563601.597:1863): user pid=990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171563628.375:1864): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563628.375:1864): arch=c000003e syscall=2 success=yes exit=11 a0=339abe0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171563628.375:1865): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563628.375:1865): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563628.375:1865):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171563632.208:1866): avc:  denied  { search } for  pid=1014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171563632.208:1866): avc:  denied  { write } for  pid=1014 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171563632.208:1866): avc:  denied  { add_name } for  pid=1014 comm="pyzor" name="xIauRS" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171563632.208:1866): avc:  denied  { create } for  pid=1014 comm="pyzor" name="xIauRS" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563632.208:1866): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171563632.209:1867): avc:  denied  { getattr } for  pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563632.209:1867): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff71c2c010 a2=7fff71c2c010 a3=3 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563632.209:1867):  path="/tmp/xIauRS"
>type=AVC msg=audit(1171563632.210:1868): avc:  denied  { write } for  pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563632.210:1868): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15834 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563632.210:1868):  path="/tmp/xIauRS"
>type=AVC msg=audit(1171563632.210:1869): avc:  denied  { remove_name } for  pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171563632.210:1869): avc:  denied  { unlink } for  pid=1014 comm="pyzor" name="xIauRS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563632.210:1869): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171563632.212:1870): avc:  denied  { read } for  pid=1014 comm="pyzor" name="tmpKAItrb" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563632.212:1870): arch=c000003e syscall=0 success=yes exit=635 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cff84 items=0 ppid=3451 pid=1014 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171563632.212:1870):  path=2F746D702F746D704B4149747262202864656C6574656429
>type=AVC msg=audit(1171563637.170:1871): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171563637.170:1871): arch=c000003e syscall=62 success=yes exit=0 a0=3f6 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171563637.180:1872): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563637.180:1872): arch=c000003e syscall=86 success=yes exit=0 a0=33bf4e0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171563637.180:1873): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563637.180:1873): arch=c000003e syscall=87 success=yes exit=0 a0=33bf4e0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171563637.211:1874): avc:  denied  { append } for  pid=1010 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171563637.211:1874): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=1007 pid=1010 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171563901.912:1875): user pid=1037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171563901.912:1876): login pid=1037 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171563901.915:1877): user pid=1037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171563901.915:1878): user pid=1037 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171564201.248:1879): user pid=1075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171564201.248:1880): login pid=1075 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171564201.250:1881): user pid=1076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171564201.250:1882): login pid=1076 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171564201.252:1883): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171564201.252:1884): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171564201.255:1885): user pid=1076 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171564201.255:1886): user pid=1076 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171564201.275:1887): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171564201.276:1888): user pid=1075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171564501.599:1889): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171564501.599:1890): login pid=1112 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171564501.602:1891): user pid=1112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171564501.602:1892): user pid=1112 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171564801.923:1893): user pid=1145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171564801.923:1894): login pid=1145 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171564801.925:1895): user pid=1146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171564801.925:1896): login pid=1146 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171564801.926:1897): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171564801.926:1898): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171564801.929:1899): user pid=1146 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171564801.929:1900): user pid=1146 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171564801.943:1901): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171564801.943:1902): user pid=1145 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171565101.267:1903): user pid=1180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171565101.267:1904): login pid=1180 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171565101.271:1905): user pid=1180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171565101.271:1906): user pid=1180 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171565401.596:1907): user pid=1215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171565401.596:1908): login pid=1215 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171565401.599:1909): user pid=1216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171565401.599:1910): login pid=1216 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171565401.601:1911): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171565401.601:1912): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171565401.603:1913): user pid=1216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171565401.603:1914): user pid=1216 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171565401.628:1915): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171565401.628:1916): user pid=1215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171565701.927:1917): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171565701.928:1918): login pid=1253 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171565701.931:1919): user pid=1253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171565701.931:1920): user pid=1253 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171566001.263:1921): user pid=1286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566001.263:1922): login pid=1286 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171566001.265:1923): user pid=1287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566001.265:1924): login pid=1287 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171566001.267:1925): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566001.267:1926): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171566001.271:1927): user pid=1287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566001.271:1928): user pid=1287 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171566001.286:1929): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171566001.286:1930): user pid=1286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171566061.601:1931): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566061.601:1932): login pid=1301 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171566061.605:1933): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566061.605:1934): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171566062.520:1935): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171566062.520:1936): user pid=1301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171566301.527:1937): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566301.527:1938): login pid=1346 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171566301.530:1939): user pid=1346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566301.530:1940): user pid=1346 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171566601.862:1941): user pid=1378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566601.862:1942): login pid=1378 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171566601.863:1943): user pid=1379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566601.863:1944): login pid=1379 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171566601.865:1945): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566601.865:1946): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171566601.872:1947): user pid=1379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566601.872:1948): user pid=1379 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171566601.882:1949): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171566601.882:1950): user pid=1378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171566789.843:1951): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171566789.843:1952): user pid=32751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171566901.850:1953): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171566901.850:1954): login pid=1415 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171566901.853:1955): user pid=1415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171566901.853:1956): user pid=1415 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171567201.171:1957): user pid=1448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171567201.171:1958): login pid=1448 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171567201.173:1959): user pid=1449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171567201.173:1960): login pid=1449 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171567201.175:1961): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171567201.175:1962): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171567201.178:1963): user pid=1449 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171567201.178:1964): user pid=1449 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171567201.192:1965): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171567201.192:1966): user pid=1448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171567501.511:1967): user pid=1483 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171567501.511:1968): login pid=1483 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171567501.514:1969): user pid=1483 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171567501.514:1970): user pid=1483 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171567536.262:1971): avc:  denied  { search } for  pid=1506 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171567536.262:1971): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1506 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171567541.572:1972): avc:  denied  { write } for  pid=1502 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171567541.572:1972): avc:  denied  { add_name } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171567541.572:1972): avc:  denied  { create } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171567541.572:1972): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171567541.573:1973): avc:  denied  { write } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171567541.573:1973): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171567541.573:1973):  path="/home/dhighley/_eX.1OL1FB.douglas"
>type=AVC msg=audit(1171567541.573:1974): avc:  denied  { getattr } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171567541.573:1974): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff51206c00 a2=7fff51206c00 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171567541.573:1974):  path="/home/dhighley/_eX.1OL1FB.douglas"
>type=AVC msg=audit(1171567541.573:1975): avc:  denied  { link } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171567541.573:1975): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e1a0 a2=7fff51206b20 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171567541.573:1976): avc:  denied  { remove_name } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171567541.573:1976): avc:  denied  { unlink } for  pid=1502 comm="procmail" name="_eX.1OL1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171567541.573:1976): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e1a0 a2=7fff51206b20 a3=61b650 items=0 ppid=1497 pid=1502 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171567801.838:1977): user pid=1527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171567801.839:1978): login pid=1527 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171567801.841:1979): user pid=1528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171567801.841:1980): login pid=1528 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171567801.842:1981): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171567801.842:1982): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171567801.851:1983): user pid=1528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171567801.851:1984): user pid=1528 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171567801.865:1985): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171567801.866:1986): user pid=1527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171568101.173:1987): user pid=1573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171568101.173:1988): login pid=1573 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171568101.176:1989): user pid=1573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171568101.176:1990): user pid=1573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171568401.497:1991): user pid=1608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171568401.497:1992): login pid=1608 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171568401.499:1993): user pid=1609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171568401.500:1994): login pid=1609 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171568401.502:1995): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171568401.502:1996): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171568401.509:1997): user pid=1609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171568401.509:1998): user pid=1609 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171568401.521:1999): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171568401.522:2000): user pid=1608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171568701.845:2001): user pid=1644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171568701.845:2002): login pid=1644 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171568701.848:2003): user pid=1644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171568701.848:2004): user pid=1644 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171569001.169:2005): user pid=1679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569001.169:2006): login pid=1679 uid=0 old auid=4294967295 new auid=111
>type=USER_ACCT msg=audit(1171569001.170:2007): user pid=1678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569001.170:2008): login pid=1678 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171569001.173:2009): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569001.173:2010): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171569001.177:2011): user pid=1679 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569001.178:2012): user pid=1679 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171569001.203:2013): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171569001.204:2014): user pid=1678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171569301.500:2015): user pid=1717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569301.500:2016): login pid=1717 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171569301.504:2017): user pid=1717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569301.504:2018): user pid=1717 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171569493.108:2019): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171569493.108:2019): arch=c000003e syscall=2 success=yes exit=8 a0=335f990 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171569493.111:2020): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171569493.111:2020): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171569493.111:2020):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171569493.863:2021): avc:  denied  { getattr } for  pid=1753 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171569493.863:2021): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff27ab49b0 a2=7fff27ab49b0 a3=6c6280 items=0 ppid=3451 pid=1753 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171569493.863:2021):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171569493.863:2022): avc:  denied  { read } for  pid=1753 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171569493.863:2022): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1753 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171569498.827:2023): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171569498.827:2023): arch=c000003e syscall=62 success=yes exit=0 a0=6d9 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171569498.999:2024): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171569498.999:2024): arch=c000003e syscall=2 success=yes exit=8 a0=10111a0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171569601.825:2025): user pid=1763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569601.825:2026): login pid=1763 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171569601.827:2027): user pid=1764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569601.828:2028): login pid=1764 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171569601.829:2029): user pid=1765 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569601.829:2030): login pid=1765 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171569601.832:2031): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569601.832:2032): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171569601.835:2033): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569601.836:2034): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171569601.848:2035): user pid=1765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569601.849:2036): user pid=1765 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171569601.857:2037): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171569601.857:2038): user pid=1763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171569661.173:2039): user pid=1786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569661.173:2040): login pid=1786 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171569661.177:2041): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569661.177:2042): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171569662.061:2043): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171569662.061:2044): user pid=1786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171569901.069:2045): user pid=1827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171569901.069:2046): login pid=1827 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171569901.072:2047): user pid=1827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171569901.072:2048): user pid=1827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171570201.396:2049): user pid=1865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171570201.397:2050): login pid=1865 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171570201.399:2051): user pid=1866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171570201.399:2052): login pid=1866 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171570201.403:2053): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171570201.403:2054): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171570201.405:2055): user pid=1866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171570201.405:2056): user pid=1866 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171570201.423:2057): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171570201.424:2058): user pid=1865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171570501.740:2059): user pid=1903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171570501.740:2060): login pid=1903 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171570501.742:2061): user pid=1903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171570501.743:2062): user pid=1903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171570512.514:2063): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570512.514:2063): arch=c000003e syscall=2 success=yes exit=11 a0=356be40 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171570512.514:2064): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570512.514:2064): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171570512.514:2064):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171570514.531:2065): avc:  denied  { search } for  pid=1926 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171570514.531:2065): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171570514.532:2066): avc:  denied  { search } for  pid=1926 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171570514.532:2066): avc:  denied  { write } for  pid=1926 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171570514.532:2066): avc:  denied  { add_name } for  pid=1926 comm="pyzor" name="EJxALj" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171570514.532:2066): avc:  denied  { create } for  pid=1926 comm="pyzor" name="EJxALj" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570514.532:2066): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171570514.533:2067): avc:  denied  { getattr } for  pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570514.533:2067): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9ff54750 a2=7fff9ff54750 a3=2 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171570514.533:2067):  path="/tmp/EJxALj"
>type=AVC msg=audit(1171570514.533:2068): avc:  denied  { write } for  pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570514.533:2068): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171570514.533:2068):  path="/tmp/EJxALj"
>type=AVC msg=audit(1171570514.533:2069): avc:  denied  { remove_name } for  pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171570514.533:2069): avc:  denied  { unlink } for  pid=1926 comm="pyzor" name="EJxALj" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570514.533:2069): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171570514.537:2070): avc:  denied  { read } for  pid=1926 comm="pyzor" name="tmpyK_E8_" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570514.537:2070): arch=c000003e syscall=0 success=yes exit=656 a0=4 a1=2aaaaf34d000 a2=1000 a3=54 items=0 ppid=3451 pid=1926 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171570514.537:2070):  path=2F746D702F746D70794B5F45385F202864656C6574656429
>type=AVC msg=audit(1171570519.502:2071): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570519.502:2071): arch=c000003e syscall=86 success=yes exit=0 a0=31cadd0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171570519.502:2072): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171570519.502:2072): arch=c000003e syscall=87 success=yes exit=0 a0=31cadd0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171570801.067:2073): user pid=1987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171570801.067:2074): login pid=1987 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171570801.069:2075): user pid=1988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171570801.069:2076): login pid=1988 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171570801.071:2077): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171570801.071:2078): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171570801.074:2079): user pid=1988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171570801.075:2080): user pid=1988 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171570801.090:2081): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171570801.091:2082): user pid=1987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171571101.399:2083): user pid=2023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171571101.400:2084): login pid=2023 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171571101.403:2085): user pid=2023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171571101.403:2086): user pid=2023 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171571190.834:2087): user pid=2043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171571190.836:2088): user pid=2043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171571190.836:2089): login pid=2043 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171571190.837:2090): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171571190.846:2091): user pid=2046 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171571190.927:2092): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1171571401.723:2093): user pid=2120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171571401.724:2094): login pid=2120 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171571401.726:2095): user pid=2121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171571401.726:2096): login pid=2121 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171571401.728:2097): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171571401.728:2098): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171571401.734:2099): user pid=2121 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171571401.734:2100): user pid=2121 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171571401.749:2101): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171571401.750:2102): user pid=2120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171571701.073:2103): user pid=2167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171571701.073:2104): login pid=2167 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171571701.076:2105): user pid=2167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171571701.076:2106): user pid=2167 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171571804.665:2107): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171571804.665:2108): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171571804.670:2109): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171571804.670:2110): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171572001.395:2111): user pid=2249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572001.395:2112): login pid=2249 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171572001.398:2113): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572001.398:2114): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171572001.398:2115): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572001.398:2116): login pid=2250 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171572001.408:2117): user pid=2250 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572001.408:2118): user pid=2250 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171572001.417:2119): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171572001.417:2120): user pid=2249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171572301.730:2121): user pid=2288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572301.730:2122): login pid=2288 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171572301.733:2123): user pid=2288 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572301.733:2124): user pid=2288 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171572349.108:2125): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1171572349.108:2126): user pid=2184 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1171572356.157:2127): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171572356.158:2128): user pid=2043 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171572601.063:2129): user pid=2328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572601.064:2130): login pid=2328 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171572601.065:2131): user pid=2329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572601.065:2132): login pid=2329 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171572601.067:2133): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572601.067:2134): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171572601.081:2135): user pid=2329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572601.081:2136): user pid=2329 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171572601.087:2137): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171572601.087:2138): user pid=2328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171572901.408:2139): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171572901.408:2140): login pid=2363 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171572901.412:2141): user pid=2363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171572901.412:2142): user pid=2363 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171573201.744:2143): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573201.744:2144): login pid=2396 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171573201.746:2145): user pid=2397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573201.746:2146): login pid=2397 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171573201.748:2147): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573201.748:2148): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171573201.751:2149): user pid=2397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573201.751:2150): user pid=2397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171573201.767:2151): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171573201.767:2152): user pid=2396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171573261.079:2153): user pid=2412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573261.080:2154): login pid=2412 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171573261.084:2155): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573261.084:2156): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171573261.984:2157): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171573261.984:2158): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171573501.993:2159): user pid=2452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573501.993:2160): login pid=2452 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171573501.997:2161): user pid=2452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573501.997:2162): user pid=2452 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171573801.331:2163): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573801.331:2164): login pid=2486 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171573801.333:2165): user pid=2487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171573801.333:2166): login pid=2487 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171573801.338:2167): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573801.338:2168): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171573801.342:2169): user pid=2487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171573801.342:2170): user pid=2487 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171573801.356:2171): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171573801.356:2172): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171573886.566:2173): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573886.566:2173): arch=c000003e syscall=2 success=yes exit=11 a0=3348410 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573886.566:2174): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573886.566:2174): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573886.566:2174):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171573886.573:2175): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573886.573:2175): arch=c000003e syscall=2 success=yes exit=8 a0=308a800 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573886.575:2176): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573886.575:2176): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573886.575:2176):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171573887.438:2177): avc:  denied  { search } for  pid=2513 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171573887.438:2177): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171573887.438:2178): avc:  denied  { getattr } for  pid=2513 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.438:2178): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffd02dbec0 a2=7fffd02dbec0 a3=6c6280 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573887.438:2178):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171573887.438:2179): avc:  denied  { read } for  pid=2513 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.438:2179): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171573887.439:2180): avc:  denied  { search } for  pid=2513 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171573887.439:2180): avc:  denied  { write } for  pid=2513 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171573887.439:2180): avc:  denied  { add_name } for  pid=2513 comm="pyzor" name="UIJ64n" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171573887.439:2180): avc:  denied  { create } for  pid=2513 comm="pyzor" name="UIJ64n" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.439:2180): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171573887.439:2181): avc:  denied  { getattr } for  pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.439:2181): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffd02da3b0 a2=7fffd02da3b0 a3=3 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573887.439:2181):  path="/tmp/UIJ64n"
>type=AVC msg=audit(1171573887.440:2182): avc:  denied  { write } for  pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.440:2182): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef15864 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573887.440:2182):  path="/tmp/UIJ64n"
>type=AVC msg=audit(1171573887.440:2183): avc:  denied  { remove_name } for  pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171573887.440:2183): avc:  denied  { unlink } for  pid=2513 comm="pyzor" name="UIJ64n" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.440:2183): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171573887.441:2184): avc:  denied  { read } for  pid=2513 comm="pyzor" name="tmpAUoxnS" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573887.441:2184): arch=c000003e syscall=0 success=yes exit=680 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=2513 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573887.441:2184):  path=2F746D702F746D7041556F786E53202864656C6574656429
>type=AVC msg=audit(1171573892.400:2185): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171573892.400:2185): arch=c000003e syscall=62 success=yes exit=0 a0=9d1 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573892.409:2186): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.409:2186): arch=c000003e syscall=86 success=yes exit=0 a0=339a3a0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573892.409:2187): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.409:2187): arch=c000003e syscall=87 success=yes exit=0 a0=339a3a0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573892.410:2188): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.410:2188): arch=c000003e syscall=2 success=yes exit=8 a0=33ec8b0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171573892.420:2189): avc:  denied  { write } for  pid=2509 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171573892.420:2189): avc:  denied  { add_name } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171573892.420:2189): avc:  denied  { create } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.420:2189): arch=c000003e syscall=2 success=yes exit=6 a0=61d7a0 a1=c1 a2=124 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171573892.420:2190): avc:  denied  { write } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.420:2190): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573892.420:2190):  path="/home/dhighley/_Nn.EyM1FB.douglas"
>type=AVC msg=audit(1171573892.421:2191): avc:  denied  { getattr } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.421:2191): arch=c000003e syscall=4 success=yes exit=0 a0=61d7a0 a1=7fffe2e81870 a2=7fffe2e81870 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171573892.421:2191):  path="/home/dhighley/_Nn.EyM1FB.douglas"
>type=AVC msg=audit(1171573892.421:2192): avc:  denied  { link } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.421:2192): arch=c000003e syscall=86 success=yes exit=0 a0=61d7a0 a1=61b520 a2=7fffe2e81790 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171573892.421:2193): avc:  denied  { remove_name } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171573892.421:2193): avc:  denied  { unlink } for  pid=2509 comm="procmail" name="_Nn.EyM1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.421:2193): arch=c000003e syscall=87 success=yes exit=0 a0=61d7a0 a1=61b520 a2=7fffe2e81790 a3=61d7a0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171573892.421:2194): avc:  denied  { append } for  pid=2509 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171573892.421:2194): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=2506 pid=2509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171574101.674:2195): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171574101.674:2196): login pid=2532 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171574101.678:2197): user pid=2532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171574101.678:2198): user pid=2532 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171574402.001:2199): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171574402.002:2200): login pid=2572 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171574402.004:2201): user pid=2573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171574402.004:2202): login pid=2573 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171574402.006:2203): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171574402.006:2204): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171574402.014:2205): user pid=2573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171574402.014:2206): user pid=2573 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171574402.023:2207): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171574402.024:2208): user pid=2572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171574573.085:2209): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.085:2209): arch=c000003e syscall=2 success=yes exit=8 a0=32639e0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171574573.088:2210): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.088:2210): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171574573.088:2210):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171574573.946:2211): avc:  denied  { getattr } for  pid=2608 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.946:2211): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff21870770 a2=7fff21870770 a3=6c6280 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171574573.946:2211):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171574573.946:2212): avc:  denied  { read } for  pid=2608 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.946:2212): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171574573.947:2213): avc:  denied  { search } for  pid=2608 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171574573.947:2213): avc:  denied  { write } for  pid=2608 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171574573.947:2213): avc:  denied  { add_name } for  pid=2608 comm="pyzor" name="Q7kiAe" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171574573.947:2213): avc:  denied  { create } for  pid=2608 comm="pyzor" name="Q7kiAe" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.947:2213): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171574573.948:2214): avc:  denied  { getattr } for  pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.948:2214): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2186f070 a2=7fff2186f070 a3=2 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171574573.948:2214):  path="/tmp/Q7kiAe"
>type=AVC msg=audit(1171574573.948:2215): avc:  denied  { write } for  pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.948:2215): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171574573.948:2215):  path="/tmp/Q7kiAe"
>type=AVC msg=audit(1171574573.948:2216): avc:  denied  { remove_name } for  pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171574573.948:2216): avc:  denied  { unlink } for  pid=2608 comm="pyzor" name="Q7kiAe" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.948:2216): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171574573.954:2217): avc:  denied  { read } for  pid=2608 comm="pyzor" name="tmprhD28x" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574573.954:2217): arch=c000003e syscall=0 success=yes exit=373 a0=4 a1=2aaaaf34d000 a2=1000 a3=13 items=0 ppid=3451 pid=2608 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171574573.954:2217):  path=2F746D702F746D70726844323878202864656C6574656429
>type=AVC msg=audit(1171574578.961:2218): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171574578.961:2218): arch=c000003e syscall=2 success=yes exit=8 a0=335ef10 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171574701.340:2219): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171574701.340:2220): login pid=2619 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171574701.343:2221): user pid=2619 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171574701.343:2222): user pid=2619 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171575001.665:2223): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575001.665:2224): login pid=2653 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171575001.667:2225): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575001.667:2226): login pid=2654 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171575001.669:2227): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575001.669:2228): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171575001.674:2229): user pid=2654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575001.675:2230): user pid=2654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171575001.692:2231): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171575001.692:2232): user pid=2653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171575302.002:2233): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575302.002:2234): login pid=2734 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171575302.007:2235): user pid=2734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575302.007:2236): user pid=2734 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171575393.841:2237): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171575393.841:2237): arch=c000003e syscall=2 success=yes exit=11 a0=338aa20 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171575393.841:2238): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171575393.841:2238): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171575393.841:2238):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171575394.349:2239): avc:  denied  { search } for  pid=2763 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171575394.349:2239): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=2763 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171575399.325:2240): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171575399.325:2240): arch=c000003e syscall=86 success=yes exit=0 a0=30af360 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171575399.325:2241): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171575399.325:2241): arch=c000003e syscall=87 success=yes exit=0 a0=30af360 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171575399.336:2242): avc:  denied  { append } for  pid=2758 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171575399.336:2242): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=2755 pid=2758 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171575601.329:2243): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575601.329:2244): login pid=2782 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171575601.331:2245): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575601.331:2246): login pid=2783 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171575601.333:2247): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575601.333:2248): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171575601.338:2249): user pid=2783 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575601.338:2250): user pid=2783 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171575601.355:2251): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171575601.355:2252): user pid=2782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171575901.668:2253): user pid=2823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171575901.668:2254): login pid=2823 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171575901.673:2255): user pid=2823 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171575901.673:2256): user pid=2823 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171576201.993:2257): user pid=2864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576201.993:2258): login pid=2864 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171576201.996:2259): user pid=2865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576201.996:2260): login pid=2865 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171576201.999:2261): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576201.999:2262): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171576202.002:2263): user pid=2865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576202.002:2264): user pid=2865 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171576202.020:2265): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171576202.020:2266): user pid=2864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171576501.336:2267): user pid=2903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576501.337:2268): login pid=2903 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171576501.341:2269): user pid=2903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576501.341:2270): user pid=2903 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171576801.666:2271): user pid=2938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576801.666:2272): login pid=2938 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171576801.668:2273): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576801.668:2274): login pid=2939 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171576801.670:2275): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576801.670:2276): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171576801.678:2277): user pid=2939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576801.679:2278): user pid=2939 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171576801.687:2279): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171576801.687:2280): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171576861.006:2281): user pid=2966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171576861.006:2282): login pid=2966 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171576861.010:2283): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171576861.010:2284): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171576861.895:2285): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171576861.896:2286): user pid=2966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171577101.904:2287): user pid=3006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171577101.904:2288): login pid=3006 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171577101.907:2289): user pid=3006 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171577101.907:2290): user pid=3006 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171577384.055:2291): avc:  denied  { write } for  pid=3045 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171577384.055:2291): avc:  denied  { add_name } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171577384.055:2291): avc:  denied  { create } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171577384.055:2291): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171577384.055:2292): avc:  denied  { write } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171577384.055:2292): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171577384.055:2292):  path="/home/dhighley/_lv.ooN1FB.douglas"
>type=AVC msg=audit(1171577384.056:2293): avc:  denied  { getattr } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171577384.056:2293): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fffa7fb09a0 a2=7fffa7fb09a0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171577384.056:2293):  path="/home/dhighley/_lv.ooN1FB.douglas"
>type=AVC msg=audit(1171577384.056:2294): avc:  denied  { link } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171577384.056:2294): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=621110 a2=7fffa7fb08c0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171577384.056:2295): avc:  denied  { remove_name } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171577384.056:2295): avc:  denied  { unlink } for  pid=3045 comm="procmail" name="_lv.ooN1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171577384.056:2295): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=621110 a2=7fffa7fb08c0 a3=61b650 items=0 ppid=3037 pid=3045 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171577401.231:2296): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171577401.231:2297): login pid=3054 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171577401.233:2298): user pid=3055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171577401.233:2299): login pid=3055 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171577401.234:2300): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171577401.234:2301): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171577401.240:2302): user pid=3055 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171577401.240:2303): user pid=3055 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171577401.254:2304): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171577401.254:2305): user pid=3054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171577656.205:2306): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171577656.206:2307): user pid=1764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171577701.210:2308): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171577701.210:2309): login pid=3103 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171577701.214:2310): user pid=3103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171577701.214:2311): user pid=3103 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171577929.683:2312): user pid=3139 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171577929.684:2313): user pid=3139 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171577929.685:2314): login pid=3139 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171577929.685:2315): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171577929.695:2316): user pid=3142 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171577929.774:2317): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1171577951.291:2318): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171577951.291:2319): user pid=3139 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171578001.541:2320): user pid=3194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578001.541:2321): login pid=3194 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171578001.543:2322): user pid=3195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578001.544:2323): login pid=3195 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171578001.544:2324): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578001.545:2325): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171578001.548:2326): user pid=3195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578001.548:2327): user pid=3195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171578001.569:2328): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171578001.569:2329): user pid=3194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171578158.979:2330): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.979:2330): arch=c000003e syscall=16 success=no exit=-25 a0=a a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578158.979:2330):  path="/home/phighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171578158.979:2331): avc:  denied  { link } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.979:2331): arch=c000003e syscall=86 success=yes exit=0 a0=33fc260 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578158.980:2332): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.980:2332): arch=c000003e syscall=87 success=yes exit=0 a0=33fc260 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578158.980:2333): avc:  denied  { write } for  pid=3451 comm="spamd" name="bayes_toks" dev=dm-0 ino=12485684 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.980:2333): arch=c000003e syscall=2 success=yes exit=10 a0=321bee0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578158.982:2334): avc:  denied  { setattr } for  pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.982:2334): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32858 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578158.982:2335): avc:  denied  { rename } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.982:2335): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578158.982:2336): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578158.982:2336): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578158.982:2336):  path="/home/phighley/.spamassassin/bayes_journal.old"
>type=AVC msg=audit(1171578159.170:2337): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="bayes_journal.old" dev=dm-0 ino=12485716 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578159.170:2337): arch=c000003e syscall=87 success=yes exit=0 a0=31ab9e0 a1=1de95d0 a2=37a0b12b60 a3=321c770 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578159.437:2338): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578159.437:2338): arch=c000003e syscall=1 success=yes exit=1680 a0=8 a1=30ba590 a2=690 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578159.437:2338):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171578159.444:2339): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578159.444:2339): arch=c000003e syscall=2 success=yes exit=8 a0=3401d50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578160.230:2340): avc:  denied  { search } for  pid=3232 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171578160.230:2340): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171578160.231:2341): avc:  denied  { getattr } for  pid=3232 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.231:2341): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff2956f470 a2=7fff2956f470 a3=6c6280 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578160.231:2341):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171578160.231:2342): avc:  denied  { read } for  pid=3232 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.231:2342): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171578160.231:2343): avc:  denied  { search } for  pid=3232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171578160.231:2343): avc:  denied  { write } for  pid=3232 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171578160.231:2343): avc:  denied  { add_name } for  pid=3232 comm="pyzor" name="55VF_F" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171578160.231:2343): avc:  denied  { create } for  pid=3232 comm="pyzor" name="55VF_F" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.231:2343): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171578160.232:2344): avc:  denied  { getattr } for  pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.232:2344): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2956dd70 a2=7fff2956dd70 a3=2 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578160.232:2344):  path="/tmp/55VF_F"
>type=AVC msg=audit(1171578160.232:2345): avc:  denied  { write } for  pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.232:2345): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cff84 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578160.232:2345):  path="/tmp/55VF_F"
>type=AVC msg=audit(1171578160.232:2346): avc:  denied  { remove_name } for  pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171578160.232:2346): avc:  denied  { unlink } for  pid=3232 comm="pyzor" name="55VF_F" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.232:2346): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171578160.236:2347): avc:  denied  { read } for  pid=3232 comm="pyzor" name="tmpSjEGnp" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578160.236:2347): arch=c000003e syscall=0 success=yes exit=232 a0=4 a1=2aaaaf34d000 a2=1000 a3=27 items=0 ppid=3451 pid=3232 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578160.236:2347):  path=2F746D702F746D70536A45476E70202864656C6574656429
>type=AVC msg=audit(1171578165.193:2348): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171578165.193:2348): arch=c000003e syscall=62 success=yes exit=0 a0=ca0 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171578165.341:2349): avc:  denied  { write } for  pid=3228 comm="procmail" name="phighley" dev=dm-0 ino=12485733 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171578165.341:2349): avc:  denied  { add_name } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171578165.341:2349): avc:  denied  { create } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.341:2349): arch=c000003e syscall=2 success=yes exit=6 a0=61b420 a1=c1 a2=124 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171578165.342:2350): avc:  denied  { write } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.342:2350): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578165.342:2350):  path="/home/phighley/_cy.10N1FB.douglas"
>type=AVC msg=audit(1171578165.342:2351): avc:  denied  { getattr } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.342:2351): arch=c000003e syscall=4 success=yes exit=0 a0=61b420 a1=7ffff51c9bc0 a2=7ffff51c9bc0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578165.342:2351):  path="/home/phighley/_cy.10N1FB.douglas"
>type=AVC msg=audit(1171578165.342:2352): avc:  denied  { link } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.342:2352): arch=c000003e syscall=86 success=yes exit=0 a0=61b420 a1=61d010 a2=7ffff51c9ae0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171578165.342:2353): avc:  denied  { remove_name } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171578165.342:2353): avc:  denied  { unlink } for  pid=3228 comm="procmail" name="_cy.10N1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.342:2353): arch=c000003e syscall=87 success=yes exit=0 a0=61b420 a1=61d010 a2=7ffff51c9ae0 a3=61b420 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171578165.343:2354): avc:  denied  { getattr } for  pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.343:2354): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7ffff51c9bb0 a2=7ffff51c9bb0 a3=619453 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578165.343:2354):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171578165.343:2355): avc:  denied  { append } for  pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.343:2355): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=3 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171578165.343:2356): avc:  denied  { lock } for  pid=3228 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171578165.343:2356): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=3223 pid=3228 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171578165.343:2356):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171578301.885:2357): user pid=3247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578301.885:2358): login pid=3247 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171578301.889:2359): user pid=3247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578301.889:2360): user pid=3247 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171578601.213:2361): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578601.213:2362): login pid=3287 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171578601.215:2363): user pid=3290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578601.215:2364): login pid=3290 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171578601.216:2365): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578601.217:2366): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171578601.228:2367): user pid=3290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578601.228:2368): user pid=3290 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171578601.238:2369): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171578601.238:2370): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171578901.568:2371): user pid=3334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171578901.569:2372): login pid=3334 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171578901.573:2373): user pid=3334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171578901.573:2374): user pid=3334 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171579201.896:2375): user pid=3373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171579201.896:2376): login pid=3373 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171579201.898:2377): user pid=3374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171579201.898:2378): login pid=3374 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171579201.900:2379): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171579201.900:2380): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171579201.905:2381): user pid=3374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171579201.905:2382): user pid=3374 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171579201.931:2383): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171579201.931:2384): user pid=3373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171579501.232:2385): user pid=3420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171579501.232:2386): login pid=3420 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171579501.235:2387): user pid=3420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171579501.235:2388): user pid=3420 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171579801.560:2389): user pid=3476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171579801.560:2390): login pid=3476 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171579801.562:2391): user pid=3477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171579801.563:2392): login pid=3477 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171579801.563:2393): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171579801.563:2394): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171579801.568:2395): user pid=3477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171579801.569:2396): user pid=3477 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171579801.587:2397): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171579801.587:2398): user pid=3476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171579959.320:2399): user pid=3510 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1171579959.322:2400): user pid=3510 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1171579959.322:2401): login pid=3510 uid=0 old auid=4294967295 new auid=1000
>type=USER_START msg=audit(1171579959.323:2402): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1171579959.332:2403): user pid=3513 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1171579959.413:2404): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=/dev/pts/1 res=success)'
>type=CRED_DISP msg=audit(1171579965.010:2405): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1171579965.011:2406): user pid=3510 uid=0 auid=1000 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=dhighley : exe="/usr/sbin/sshd" (hostname=spruce.highley-recommended.com, addr=10.2.2.2, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1171580101.901:2407): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580101.902:2408): login pid=3562 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171580101.905:2409): user pid=3562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580101.905:2410): user pid=3562 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171580125.962:2411): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580125.962:2411): arch=c000003e syscall=2 success=yes exit=11 a0=33ef020 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580125.962:2412): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580125.962:2412): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580125.962:2412):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171580125.969:2413): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580125.969:2413): arch=c000003e syscall=2 success=yes exit=8 a0=3084a00 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580125.971:2414): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580125.971:2414): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580125.971:2414):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171580126.580:2415): avc:  denied  { search } for  pid=3581 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171580126.580:2415): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171580126.580:2416): avc:  denied  { getattr } for  pid=3581 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.580:2416): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff041adc50 a2=7fff041adc50 a3=6c6280 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580126.580:2416):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171580126.580:2417): avc:  denied  { read } for  pid=3581 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.580:2417): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171580126.581:2418): avc:  denied  { search } for  pid=3581 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171580126.581:2418): avc:  denied  { write } for  pid=3581 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171580126.581:2418): avc:  denied  { add_name } for  pid=3581 comm="pyzor" name="b5l6_m" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171580126.581:2418): avc:  denied  { create } for  pid=3581 comm="pyzor" name="b5l6_m" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.581:2418): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171580126.582:2419): avc:  denied  { getattr } for  pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.582:2419): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff041ac550 a2=7fff041ac550 a3=2 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580126.582:2419):  path="/tmp/b5l6_m"
>type=AVC msg=audit(1171580126.582:2420): avc:  denied  { write } for  pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.582:2420): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cf864 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580126.582:2420):  path="/tmp/b5l6_m"
>type=AVC msg=audit(1171580126.582:2421): avc:  denied  { remove_name } for  pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171580126.582:2421): avc:  denied  { unlink } for  pid=3581 comm="pyzor" name="b5l6_m" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.582:2421): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171580126.587:2422): avc:  denied  { read } for  pid=3581 comm="pyzor" name="tmpfTvvt1" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580126.587:2422): arch=c000003e syscall=0 success=yes exit=1299 a0=5 a1=2aaaaf34e000 a2=1000 a3=0 items=0 ppid=3451 pid=3581 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171580126.587:2422):  path=2F746D702F746D70665476767431202864656C6574656429
>type=AVC msg=audit(1171580131.544:2423): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171580131.544:2423): arch=c000003e syscall=62 success=yes exit=0 a0=dfd a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580131.658:2424): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580131.658:2424): arch=c000003e syscall=86 success=yes exit=0 a0=30f05f0 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580131.659:2425): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634254 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580131.659:2425): arch=c000003e syscall=87 success=yes exit=0 a0=30f05f0 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580131.660:2426): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580131.660:2426): arch=c000003e syscall=2 success=yes exit=8 a0=60c920 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171580131.730:2427): avc:  denied  { write } for  pid=3577 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171580131.730:2427): avc:  denied  { add_name } for  pid=3577 comm="procmail" name="_53.jTO1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171580131.730:2427): arch=c000003e syscall=2 success=yes exit=6 a0=61b610 a1=c1 a2=124 a3=61b610 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171580131.731:2428): avc:  denied  { remove_name } for  pid=3577 comm="procmail" name="_53.jTO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171580131.731:2428): arch=c000003e syscall=87 success=yes exit=0 a0=61b610 a1=61cec0 a2=7fff68592860 a3=61b610 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171580131.731:2429): avc:  denied  { append } for  pid=3577 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171580131.731:2429): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=3574 pid=3577 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171580401.228:2430): user pid=3612 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580401.229:2431): login pid=3612 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171580401.231:2432): user pid=3613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580401.231:2433): login pid=3613 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171580401.232:2434): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580401.232:2435): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171580401.233:2436): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580401.233:2437): login pid=3614 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171580401.241:2438): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580401.241:2439): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171580401.249:2440): user pid=3614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580401.249:2441): user pid=3614 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171580401.258:2442): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171580401.258:2443): user pid=3612 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171580461.565:2444): user pid=3633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580461.566:2445): login pid=3633 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171580461.568:2446): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580461.569:2447): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171580462.451:2448): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171580462.452:2449): user pid=3633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171580701.459:2450): user pid=3674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171580701.459:2451): login pid=3674 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171580701.462:2452): user pid=3674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171580701.463:2453): user pid=3674 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171581001.782:2454): user pid=3711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581001.782:2455): login pid=3711 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171581001.784:2456): user pid=3712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581001.784:2457): login pid=3712 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171581001.785:2458): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581001.785:2459): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171581001.789:2460): user pid=3712 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581001.789:2461): user pid=3712 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171581001.803:2462): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171581001.803:2463): user pid=3711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171581039.066:2464): avc:  denied  { getattr } for  pid=3734 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581039.066:2464): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff62887780 a2=7fff62887780 a3=6c6280 items=0 ppid=3451 pid=3734 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171581039.066:2464):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171581039.066:2465): avc:  denied  { read } for  pid=3734 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581039.066:2465): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=3734 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171581044.029:2466): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171581044.029:2466): arch=c000003e syscall=62 success=yes exit=0 a0=e96 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171581044.237:2467): avc:  denied  { create } for  pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581044.237:2467): arch=c000003e syscall=2 success=yes exit=6 a0=61c930 a1=c1 a2=124 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171581044.238:2468): avc:  denied  { write } for  pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581044.238:2468): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171581044.238:2468):  path="/home/dhighley/_S6.0hO1FB.douglas"
>type=AVC msg=audit(1171581044.238:2469): avc:  denied  { getattr } for  pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581044.238:2469): arch=c000003e syscall=4 success=yes exit=0 a0=61c930 a1=7fff6241ae20 a2=7fff6241ae20 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171581044.238:2469):  path="/home/dhighley/_S6.0hO1FB.douglas"
>type=AVC msg=audit(1171581044.238:2470): avc:  denied  { link } for  pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581044.238:2470): arch=c000003e syscall=86 success=yes exit=0 a0=61c930 a1=61b510 a2=7fff6241ad40 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171581044.238:2471): avc:  denied  { unlink } for  pid=3730 comm="procmail" name="_S6.0hO1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171581044.238:2471): arch=c000003e syscall=87 success=yes exit=0 a0=61c930 a1=61b510 a2=7fff6241ad40 a3=61c930 items=0 ppid=3727 pid=3730 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171581301.119:2472): user pid=3755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581301.119:2473): login pid=3755 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171581301.123:2474): user pid=3755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581301.123:2475): user pid=3755 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171581601.445:2476): user pid=3789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581601.445:2477): login pid=3789 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171581601.447:2478): user pid=3790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581601.447:2479): login pid=3790 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171581601.449:2480): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581601.449:2481): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171581601.454:2482): user pid=3790 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581601.454:2483): user pid=3790 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171581601.471:2484): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171581601.472:2485): user pid=3789 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171581901.791:2486): user pid=3827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171581901.791:2487): login pid=3827 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171581901.796:2488): user pid=3827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171581901.796:2489): user pid=3827 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171582201.116:2490): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171582201.116:2491): login pid=3860 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171582201.118:2492): user pid=3861 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171582201.118:2493): login pid=3861 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171582201.124:2494): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171582201.124:2495): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171582201.128:2496): user pid=3861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171582201.128:2497): user pid=3861 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171582201.154:2498): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171582201.154:2499): user pid=3860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171582501.453:2500): user pid=3897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171582501.453:2501): login pid=3897 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171582501.457:2502): user pid=3897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171582501.457:2503): user pid=3897 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171582801.781:2504): user pid=3931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171582801.781:2505): user pid=3930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171582801.781:2506): login pid=3931 uid=0 old auid=4294967295 new auid=111
>type=LOGIN msg=audit(1171582801.781:2507): login pid=3930 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171582801.787:2508): user pid=3931 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171582801.787:2509): user pid=3931 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171582801.792:2510): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171582801.792:2511): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171582801.814:2512): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171582801.814:2513): user pid=3930 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171583101.112:2514): user pid=3966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171583101.112:2515): login pid=3966 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171583101.115:2516): user pid=3966 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171583101.115:2517): user pid=3966 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171583401.449:2518): user pid=4000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171583401.450:2519): login pid=4000 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171583401.452:2520): user pid=4001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171583401.452:2521): login pid=4001 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171583401.454:2522): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171583401.454:2523): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171583401.463:2524): user pid=4001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171583401.463:2525): user pid=4001 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171583401.472:2526): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171583401.473:2527): user pid=4000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171583701.780:2528): user pid=4035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171583701.780:2529): login pid=4035 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171583701.783:2530): user pid=4035 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171583701.783:2531): user pid=4035 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171584001.104:2532): user pid=4069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584001.104:2533): login pid=4069 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171584001.106:2534): user pid=4070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584001.107:2535): login pid=4070 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171584001.108:2536): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584001.108:2537): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171584001.114:2538): user pid=4070 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584001.114:2539): user pid=4070 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171584001.127:2540): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171584001.127:2541): user pid=4069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171584061.434:2542): user pid=4085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584061.434:2543): login pid=4085 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171584061.437:2544): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584061.437:2545): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171584062.331:2546): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171584062.332:2547): user pid=4085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171584301.337:2548): user pid=4128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584301.337:2549): login pid=4128 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171584301.340:2550): user pid=4128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584301.340:2551): user pid=4128 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171584598.338:2552): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584598.338:2552): arch=c000003e syscall=2 success=yes exit=11 a0=33ced10 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171584598.338:2553): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=12484632 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584598.338:2553): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=2 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584598.338:2553):  path="/home/phighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171584598.344:2554): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=12487199 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584598.344:2554): arch=c000003e syscall=2 success=yes exit=8 a0=3098560 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171584598.347:2555): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c122.cloudmark.com.conf" dev=dm-0 ino=12487167 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584598.347:2555): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584598.347:2555):  path="/home/phighley/.razor/server.c122.cloudmark.com.conf"
>type=AVC msg=audit(1171584599.747:2556): avc:  denied  { getattr } for  pid=4172 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.747:2556): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffdf5b34b0 a2=7fffdf5b34b0 a3=6c6280 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584599.747:2556):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171584599.747:2557): avc:  denied  { read } for  pid=4172 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.747:2557): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171584599.748:2558): avc:  denied  { search } for  pid=4172 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171584599.748:2558): avc:  denied  { write } for  pid=4172 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171584599.748:2558): avc:  denied  { add_name } for  pid=4172 comm="pyzor" name="8g73qk" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171584599.748:2558): avc:  denied  { create } for  pid=4172 comm="pyzor" name="8g73qk" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.748:2558): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171584599.749:2559): avc:  denied  { getattr } for  pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.749:2559): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffdf5b1db0 a2=7fffdf5b1db0 a3=2 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584599.749:2559):  path="/tmp/8g73qk"
>type=AVC msg=audit(1171584599.749:2560): avc:  denied  { write } for  pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.749:2560): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584599.749:2560):  path="/tmp/8g73qk"
>type=AVC msg=audit(1171584599.749:2561): avc:  denied  { remove_name } for  pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171584599.749:2561): avc:  denied  { unlink } for  pid=4172 comm="pyzor" name="8g73qk" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.749:2561): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171584599.751:2562): avc:  denied  { read } for  pid=4172 comm="pyzor" name="tmpPkhJHw" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584599.751:2562): arch=c000003e syscall=0 success=yes exit=602 a0=4 a1=2aaaaf34d000 a2=1000 a3=67 items=0 ppid=3451 pid=4172 auid=4294967295 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584599.751:2562):  path=2F746D702F746D70506B684A4877202864656C6574656429
>type=USER_ACCT msg=audit(1171584601.663:2563): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584601.663:2564): login pid=4173 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171584601.666:2565): user pid=4174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584601.666:2566): login pid=4174 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171584601.669:2567): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584601.669:2568): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171584601.671:2569): user pid=4174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584601.671:2570): user pid=4174 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171584601.690:2571): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171584601.690:2572): user pid=4173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171584604.949:2573): avc:  denied  { link } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.949:2573): arch=c000003e syscall=86 success=yes exit=0 a0=33c9600 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171584604.949:2574): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=12484628 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.949:2574): arch=c000003e syscall=87 success=yes exit=0 a0=33c9600 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171584604.950:2575): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=12487184 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.950:2575): arch=c000003e syscall=2 success=yes exit=8 a0=309b860 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1003 suid=0 fsuid=1003 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171584604.974:2576): avc:  denied  { getattr } for  pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.974:2576): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7fff8c647020 a2=7fff8c647020 a3=619453 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584604.974:2576):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171584604.974:2577): avc:  denied  { append } for  pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.974:2577): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171584604.974:2578): avc:  denied  { lock } for  pid=4168 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584604.974:2578): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=4163 pid=4168 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171584604.974:2578):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171584901.010:2579): user pid=4215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171584901.011:2580): login pid=4215 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171584901.014:2581): user pid=4215 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171584901.014:2582): user pid=4215 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171584950.362:2583): avc:  denied  { search } for  pid=4238 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171584950.362:2583): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4238 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171584950.592:2584): avc:  denied  { write } for  pid=4234 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171584950.592:2584): avc:  denied  { add_name } for  pid=4234 comm="procmail" name="_KCB.2eP1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171584950.592:2584): arch=c000003e syscall=2 success=yes exit=6 a0=61c5a0 a1=c1 a2=124 a3=61c5a0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171584950.593:2585): avc:  denied  { remove_name } for  pid=4234 comm="procmail" name="_KCB.2eP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171584950.593:2585): arch=c000003e syscall=87 success=yes exit=0 a0=61c5a0 a1=61b520 a2=7fffb87cc0e0 a3=61c5a0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171584950.593:2586): avc:  denied  { append } for  pid=4234 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171584950.593:2586): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=4231 pid=4234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171585145.432:2587): avc:  denied  { create } for  pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171585145.432:2587): arch=c000003e syscall=2 success=yes exit=6 a0=61b5c0 a1=c1 a2=124 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171585145.432:2588): avc:  denied  { write } for  pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171585145.432:2588): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171585145.432:2588):  path="/home/dhighley/_kCB.5hP1FB.douglas"
>type=AVC msg=audit(1171585145.432:2589): avc:  denied  { getattr } for  pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171585145.432:2589): arch=c000003e syscall=4 success=yes exit=0 a0=61b5c0 a1=7fff2c90c300 a2=7fff2c90c300 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171585145.432:2589):  path="/home/dhighley/_kCB.5hP1FB.douglas"
>type=AVC msg=audit(1171585145.432:2590): avc:  denied  { link } for  pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171585145.432:2590): arch=c000003e syscall=86 success=yes exit=0 a0=61b5c0 a1=61c640 a2=7fff2c90c220 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171585145.433:2591): avc:  denied  { unlink } for  pid=4260 comm="procmail" name="_kCB.5hP1FB.douglas" dev=dm-0 ino=12484628 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171585145.433:2591): arch=c000003e syscall=87 success=yes exit=0 a0=61b5c0 a1=61c640 a2=7fff2c90c220 a3=61b5c0 items=0 ppid=4257 pid=4260 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171585201.347:2592): user pid=4273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171585201.347:2593): login pid=4273 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171585201.348:2594): user pid=4274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171585201.348:2595): login pid=4274 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171585201.353:2596): user pid=4274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171585201.353:2597): user pid=4274 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171585201.358:2598): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171585201.358:2599): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171585201.380:2600): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171585201.381:2601): user pid=4273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171585501.681:2602): user pid=4318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171585501.681:2603): login pid=4318 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171585501.685:2604): user pid=4318 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171585501.685:2605): user pid=4318 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171585801.006:2606): user pid=4361 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171585801.006:2607): login pid=4361 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171585801.008:2608): user pid=4362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171585801.009:2609): login pid=4362 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171585801.010:2610): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171585801.010:2611): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171585801.013:2612): user pid=4362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171585801.014:2613): user pid=4362 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171585801.033:2614): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171585801.033:2615): user pid=4361 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171586101.353:2616): user pid=4397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171586101.354:2617): login pid=4397 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171586101.356:2618): user pid=4397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171586101.357:2619): user pid=4397 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171586401.681:2620): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171586401.681:2621): login pid=4429 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171586401.683:2622): user pid=4430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171586401.684:2623): login pid=4430 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171586401.685:2624): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171586401.685:2625): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171586401.689:2626): user pid=4430 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171586401.689:2627): user pid=4430 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171586401.703:2628): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171586401.703:2629): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171586701.020:2630): user pid=4464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171586701.020:2631): login pid=4464 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171586701.024:2632): user pid=4464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171586701.024:2633): user pid=4464 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171587001.356:2634): user pid=4498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587001.357:2635): login pid=4498 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171587001.358:2636): user pid=4499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587001.358:2637): login pid=4499 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171587001.363:2638): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587001.363:2639): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171587001.368:2640): user pid=4499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587001.368:2641): user pid=4499 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171587001.383:2642): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171587001.383:2643): user pid=4498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171587301.707:2644): user pid=4533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587301.708:2645): login pid=4533 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171587301.711:2646): user pid=4533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587301.711:2647): user pid=4533 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171587601.035:2648): user pid=4565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587601.036:2649): login pid=4565 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171587601.037:2650): user pid=4566 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587601.037:2651): login pid=4566 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171587601.043:2652): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587601.043:2653): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171587601.046:2654): user pid=4566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587601.046:2655): user pid=4566 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171587601.073:2656): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171587601.073:2657): user pid=4565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171587661.374:2658): user pid=4580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587661.374:2659): login pid=4580 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171587661.379:2660): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587661.379:2661): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171587662.287:2662): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171587662.288:2663): user pid=4580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171587901.295:2664): user pid=4620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171587901.295:2665): login pid=4620 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171587901.300:2666): user pid=4620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171587901.300:2667): user pid=4620 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171588201.629:2668): user pid=4653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171588201.629:2669): login pid=4653 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171588201.632:2670): user pid=4654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171588201.632:2671): login pid=4654 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171588201.635:2672): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171588201.635:2673): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171588201.637:2674): user pid=4654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171588201.637:2675): user pid=4654 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171588201.654:2676): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171588201.654:2677): user pid=4653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171588440.581:2678): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171588440.582:2679): user pid=3613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171588501.586:2680): user pid=4690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171588501.587:2681): login pid=4690 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171588501.590:2682): user pid=4690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171588501.590:2683): user pid=4690 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171588801.910:2684): user pid=4723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171588801.911:2685): login pid=4723 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171588801.913:2686): user pid=4724 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171588801.913:2687): login pid=4724 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171588801.915:2688): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171588801.915:2689): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171588801.920:2690): user pid=4724 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171588801.920:2691): user pid=4724 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171588801.938:2692): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171588801.938:2693): user pid=4723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171589101.251:2694): user pid=4763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171589101.251:2695): login pid=4763 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171589101.254:2696): user pid=4763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171589101.254:2697): user pid=4763 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171589401.576:2698): user pid=4798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171589401.576:2699): login pid=4798 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171589401.579:2700): user pid=4799 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171589401.579:2701): login pid=4799 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171589401.582:2702): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171589401.582:2703): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171589401.584:2704): user pid=4799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171589401.584:2705): user pid=4799 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171589401.603:2706): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171589401.603:2707): user pid=4798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171589420.760:2708): avc:  denied  { getattr } for  pid=4821 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171589420.760:2708): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc5daaca0 a2=7fffc5daaca0 a3=6c6280 items=0 ppid=3451 pid=4821 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171589420.760:2708):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171589420.760:2709): avc:  denied  { read } for  pid=4821 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171589420.760:2709): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=4821 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171589610.888:2710): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171589610.888:2710): arch=c000003e syscall=2 success=yes exit=8 a0=320d540 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171589610.889:2711): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171589610.889:2711): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171589610.889:2711):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171589616.406:2712): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171589616.406:2712): arch=c000003e syscall=62 success=yes exit=0 a0=12ec a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171589616.419:2713): avc:  denied  { write } for  pid=3451 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171589616.419:2713): arch=c000003e syscall=2 success=yes exit=8 a0=338b050 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1171589701.918:2714): user pid=4852 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171589701.919:2715): login pid=4852 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171589701.922:2716): user pid=4852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171589701.922:2717): user pid=4852 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171590001.250:2718): user pid=4886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590001.251:2719): login pid=4886 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171590001.252:2720): user pid=4887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590001.252:2721): login pid=4887 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171590001.254:2722): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590001.254:2723): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171590001.264:2724): user pid=4887 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590001.264:2725): user pid=4887 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171590001.272:2726): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171590001.272:2727): user pid=4886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171590301.599:2728): user pid=4923 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590301.599:2729): login pid=4923 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171590301.603:2730): user pid=4923 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590301.603:2731): user pid=4923 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171590601.924:2732): user pid=4956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590601.924:2733): login pid=4956 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171590601.926:2734): user pid=4957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590601.926:2735): login pid=4957 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171590601.928:2736): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590601.928:2737): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171590601.931:2738): user pid=4957 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590601.931:2739): user pid=4957 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171590601.950:2740): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171590601.950:2741): user pid=4956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171590901.261:2742): user pid=4992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171590901.261:2743): login pid=4992 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171590901.264:2744): user pid=4992 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171590901.264:2745): user pid=4992 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171591201.594:2746): user pid=5026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591201.594:2747): login pid=5026 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171591201.597:2748): user pid=5027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591201.598:2749): login pid=5027 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171591201.598:2750): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591201.599:2751): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171591201.601:2752): user pid=5028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591201.601:2753): login pid=5028 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171591201.602:2754): user pid=5027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591201.602:2755): user pid=5027 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171591201.615:2756): user pid=5028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591201.615:2757): user pid=5028 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171591201.622:2758): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171591201.623:2759): user pid=5026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171591261.933:2760): user pid=5047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591261.934:2761): login pid=5047 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171591261.936:2762): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591261.937:2763): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171591262.834:2764): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171591262.835:2765): user pid=5047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171591494.114:2766): avc:  denied  { create } for  pid=5093 comm="pyzor" name="luCFfX" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171591494.114:2766): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171591494.115:2767): avc:  denied  { getattr } for  pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171591494.115:2767): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffb5e76260 a2=7fffb5e76260 a3=3 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171591494.115:2767):  path="/tmp/luCFfX"
>type=AVC msg=audit(1171591494.115:2768): avc:  denied  { write } for  pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171591494.115:2768): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaaef158c4 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171591494.115:2768):  path="/tmp/luCFfX"
>type=AVC msg=audit(1171591494.116:2769): avc:  denied  { unlink } for  pid=5093 comm="pyzor" name="luCFfX" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171591494.116:2769): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6ae6b0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171591494.119:2770): avc:  denied  { read } for  pid=5093 comm="pyzor" name="tmpYNKbQ6" dev=dm-0 ino=30703638 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171591494.119:2770): arch=c000003e syscall=0 success=yes exit=1457 a0=4 a1=2aaaaf34d000 a2=1000 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=5093 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171591494.119:2770):  path=2F746D702F746D70594E4B625136202864656C6574656429
>type=USER_ACCT msg=audit(1171591501.842:2771): user pid=5094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591501.842:2772): login pid=5094 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171591501.846:2773): user pid=5094 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591501.846:2774): user pid=5094 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171591801.172:2775): user pid=5126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591801.172:2776): login pid=5126 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171591801.174:2777): user pid=5127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171591801.174:2778): login pid=5127 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171591801.179:2779): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591801.179:2780): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171591801.184:2781): user pid=5127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171591801.184:2782): user pid=5127 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171591801.198:2783): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171591801.198:2784): user pid=5126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171592101.511:2785): user pid=5161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171592101.512:2786): login pid=5161 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171592101.516:2787): user pid=5161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171592101.516:2788): user pid=5161 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171592401.835:2789): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171592401.835:2790): login pid=5194 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171592401.837:2791): user pid=5195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171592401.838:2792): login pid=5195 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171592401.840:2793): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171592401.840:2794): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171592401.844:2795): user pid=5195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171592401.844:2796): user pid=5195 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171592401.870:2797): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171592401.871:2798): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171592701.173:2799): user pid=5231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171592701.174:2800): login pid=5231 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171592701.176:2801): user pid=5231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171592701.176:2802): user pid=5231 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171593001.501:2803): user pid=5264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593001.501:2804): login pid=5264 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171593001.503:2805): user pid=5265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593001.503:2806): login pid=5265 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171593001.505:2807): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593001.505:2808): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171593001.508:2809): user pid=5265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593001.509:2810): user pid=5265 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171593001.526:2811): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171593001.526:2812): user pid=5264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171593301.838:2813): user pid=5303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593301.838:2814): login pid=5303 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171593301.842:2815): user pid=5303 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593301.842:2816): user pid=5303 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171593601.167:2817): user pid=5337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593601.167:2818): login pid=5337 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171593601.169:2819): user pid=5338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593601.170:2820): login pid=5338 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171593601.171:2821): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593601.171:2822): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171593601.178:2823): user pid=5338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593601.178:2824): user pid=5338 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171593601.198:2825): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171593601.199:2826): user pid=5337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171593772.773:2827): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct= : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1171593772.773:2828): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1171593782.925:2829): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171593782.926:2830): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171593782.934:2831): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171593782.943:2832): login pid=3689 uid=0 old auid=1000 new auid=1000
>type=USER_START msg=audit(1171593782.952:2833): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=dhighley : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171593782.953:2834): user pid=3689 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/gdm-binary" (hostname=douglas, addr=10.2.2.7, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1171593832.860:2835): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1171593832.861:2836): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1171593832.871:2837): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1171593832.871:2838): user pid=5582 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1171593854.705:2839): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1171593854.705:2840): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1171593854.713:2841): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1171593854.714:2842): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1171593873.822:2843): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1171593873.822:2844): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1171593873.832:2845): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1171593873.832:2846): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1171593883.244:2847): avc:  denied  { ioctl } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.244:2847): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffbe9f5050 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593883.244:2847):  path="/home/dhighley/.spamassassin/bayes.lock.douglas.highley-recommended.com.3451"
>type=AVC msg=audit(1171593883.244:2848): avc:  denied  { link } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.244:2848): arch=c000003e syscall=86 success=yes exit=0 a0=32c0e10 a1=2daaf00 a2=37a0b14937 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593883.244:2849): avc:  denied  { unlink } for  pid=3451 comm="spamd" name="bayes.lock.douglas.highley-recommended.com.3451" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.244:2849): arch=c000003e syscall=87 success=yes exit=0 a0=32c0e10 a1=1cba030 a2=37a0b12b60 a3=5 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593883.246:2850): avc:  denied  { write } for  pid=3451 comm="spamd" name="bayes_seen" dev=dm-0 ino=15630939 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.246:2850): arch=c000003e syscall=2 success=yes exit=8 a0=2dfd6a0 a1=2 a2=0 a3=180 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593883.247:2851): avc:  denied  { setattr } for  pid=3451 comm="spamd" name="bayes.lock" dev=dm-0 ino=15634255 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.247:2851): arch=c000003e syscall=132 success=yes exit=0 a0=3095f40 a1=7fffbe9f5460 a2=37a0b12b60 a3=1f32860 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593883.250:2852): avc:  denied  { rename } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593883.250:2852): arch=c000003e syscall=82 success=yes exit=0 a0=33590e0 a1=31ab9e0 a2=37a0b1227e a3=8 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593890.485:2853): avc:  denied  { append } for  pid=3451 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593890.485:2853): arch=c000003e syscall=1 success=yes exit=1968 a0=9 a1=3396810 a2=7b0 a3=11 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593890.485:2853):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171593890.495:2854): avc:  denied  { append } for  pid=3451 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=system_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593890.495:2854): arch=c000003e syscall=2 success=yes exit=8 a0=32f36b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593891.195:2855): avc:  denied  { search } for  pid=5767 comm="pyzor" name="/" dev=autofs ino=10947 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171593891.195:2855): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171593891.196:2856): avc:  denied  { getattr } for  pid=5767 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.196:2856): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffc4643540 a2=7fffc4643540 a3=6c6280 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593891.196:2856):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171593891.196:2857): avc:  denied  { read } for  pid=5767 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=system_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.196:2857): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171593891.197:2858): avc:  denied  { search } for  pid=5767 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171593891.197:2858): avc:  denied  { write } for  pid=5767 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171593891.197:2858): avc:  denied  { add_name } for  pid=5767 comm="pyzor" name="Xl5SZ6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171593891.197:2858): avc:  denied  { create } for  pid=5767 comm="pyzor" name="Xl5SZ6" scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.197:2858): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171593891.197:2859): avc:  denied  { getattr } for  pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.197:2859): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffc4641e40 a2=7fffc4641e40 a3=2 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593891.197:2859):  path="/tmp/Xl5SZ6"
>type=AVC msg=audit(1171593891.198:2860): avc:  denied  { write } for  pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.198:2860): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0cfcb4 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593891.198:2860):  path="/tmp/Xl5SZ6"
>type=AVC msg=audit(1171593891.198:2861): avc:  denied  { remove_name } for  pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171593891.198:2861): avc:  denied  { unlink } for  pid=5767 comm="pyzor" name="Xl5SZ6" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.198:2861): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=6cc6c0 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171593891.200:2862): avc:  denied  { read } for  pid=5767 comm="pyzor" name="tmprxSRS2" dev=dm-0 ino=30703639 scontext=system_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593891.200:2862): arch=c000003e syscall=0 success=yes exit=602 a0=4 a1=2aaaaf34d000 a2=1000 a3=67 items=0 ppid=3451 pid=5767 auid=4294967295 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=system_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593891.200:2862):  path=2F746D702F746D70727853525332202864656C6574656429
>type=AVC msg=audit(1171593896.153:2863): avc:  denied  { signal } for  pid=3451 comm="spamd" scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171593896.153:2863): arch=c000003e syscall=62 success=yes exit=0 a0=1687 a1=f a2=54 a3=0 items=0 ppid=3175 pid=3451 auid=4294967295 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171593896.268:2864): avc:  denied  { write } for  pid=5762 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171593896.268:2864): avc:  denied  { add_name } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171593896.268:2864): avc:  denied  { create } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.268:2864): arch=c000003e syscall=2 success=yes exit=6 a0=61c950 a1=c1 a2=124 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171593896.269:2865): avc:  denied  { write } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.269:2865): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593896.269:2865):  path="/home/dhighley/_CaB.oqR1FB.douglas"
>type=AVC msg=audit(1171593896.269:2866): avc:  denied  { getattr } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.269:2866): arch=c000003e syscall=4 success=yes exit=0 a0=61c950 a1=7fffd3c6d650 a2=7fffd3c6d650 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171593896.269:2866):  path="/home/dhighley/_CaB.oqR1FB.douglas"
>type=AVC msg=audit(1171593896.269:2867): avc:  denied  { link } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.269:2867): arch=c000003e syscall=86 success=yes exit=0 a0=61c950 a1=61b530 a2=7fffd3c6d570 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171593896.269:2868): avc:  denied  { remove_name } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171593896.269:2868): avc:  denied  { unlink } for  pid=5762 comm="procmail" name="_CaB.oqR1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.269:2868): arch=c000003e syscall=87 success=yes exit=0 a0=61c950 a1=61b530 a2=7fffd3c6d570 a3=61c950 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171593896.269:2869): avc:  denied  { append } for  pid=5762 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171593896.269:2869): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=5759 pid=5762 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171593900.873:2870): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171593900.874:2871): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1171593900.882:2872): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1171593900.882:2873): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1171593901.514:2874): user pid=5834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171593901.515:2875): login pid=5834 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171593901.519:2876): user pid=5834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171593901.520:2877): user pid=5834 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171593972.799:2878): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1171593972.800:2879): user pid=5648 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1171594025.022:2880): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1171594025.023:2881): user pid=5718 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1171594074.766:2882): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1171594074.768:2883): user pid=5797 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=MAC_POLICY_LOAD msg=audit(1171594078.590:2884): policy loaded auid=1000
>type=SYSCALL msg=audit(1171594078.590:2884): arch=c000003e syscall=1 success=yes exit=1139380 a0=4 a1=2aaaaab05000 a2=1162b4 a3=0 items=0 ppid=5882 pid=5884 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=AVC msg=audit(1171594099.336:2885): avc:  denied  { search } for  pid=5980 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171594099.336:2885): avc:  denied  { write } for  pid=5980 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171594099.336:2885): avc:  denied  { add_name } for  pid=5980 comm="pyzor" name="lXon5A" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171594099.336:2885): avc:  denied  { create } for  pid=5980 comm="pyzor" name="lXon5A" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594099.336:2885): arch=c000003e syscall=2 success=yes exit=4 a0=6c6240 a1=200c2 a2=180 a3=6c6240 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171594099.336:2886): avc:  denied  { getattr } for  pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594099.336:2886): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff9853b920 a2=7fff9853b920 a3=2 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594099.336:2886):  path="/tmp/lXon5A"
>type=AVC msg=audit(1171594099.336:2887): avc:  denied  { write } for  pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594099.336:2887): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8ec4 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594099.336:2887):  path="/tmp/lXon5A"
>type=AVC msg=audit(1171594099.337:2888): avc:  denied  { remove_name } for  pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171594099.337:2888): avc:  denied  { unlink } for  pid=5980 comm="pyzor" name="lXon5A" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594099.337:2888): arch=c000003e syscall=87 success=yes exit=0 a0=61d5b0 a1=6c6280 a2=37a8f2f4d8 a3=61d5b0 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171594099.339:2889): avc:  denied  { read } for  pid=5980 comm="pyzor" name="tmpM6qEdz" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594099.339:2889): arch=c000003e syscall=0 success=yes exit=1120 a0=4 a1=2aaaaf34d000 a2=1000 a3=e0 items=0 ppid=5974 pid=5980 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594099.339:2889):  path=2F746D702F746D704D367145647A202864656C6574656429
>type=AVC msg=audit(1171594104.293:2890): avc:  denied  { signal } for  pid=5974 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171594104.293:2890): arch=c000003e syscall=62 success=yes exit=0 a0=175c a1=f a2=54 a3=0 items=0 ppid=1 pid=5974 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171594118.734:2891): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171594118.734:2892): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171594118.763:2893): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1171594127.331:2894): user pid=5991 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171594134.584:2895): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171594134.585:2896): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171594134.590:2897): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1171594155.405:2898): enforcing=1 old_enforcing=0 auid=1000
>type=SYSCALL msg=audit(1171594155.405:2898): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff998e34e0 a2=1 a3=0 items=0 ppid=6010 pid=6011 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_END msg=audit(1171594155.484:2899): user pid=6003 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171594168.071:2900): user pid=6051 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594168.074:2901): user pid=6051 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594183.627:2902): user pid=6058 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594183.630:2903): user pid=6058 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594201.152:2904): user pid=6067 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594201.155:2905): user pid=6067 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594201.871:2906): user pid=6073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171594201.872:2907): user pid=6074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171594201.872:2908): login pid=6073 uid=0 old auid=4294967295 new auid=0
>type=LOGIN msg=audit(1171594201.872:2909): login pid=6074 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171594201.877:2910): user pid=6074 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594201.878:2911): user pid=6074 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171594201.887:2912): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594201.887:2913): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171594201.911:2914): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171594201.911:2915): user pid=6073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171594208.006:2916): user pid=6089 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594208.010:2917): user pid=6089 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171594351.233:2918): avc:  denied  { append } for  pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594351.233:2918): arch=c000003e syscall=2 success=no exit=-13 a0=2d806b0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594351.752:2919): avc:  denied  { search } for  pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171594351.752:2919): arch=c000003e syscall=2 success=no exit=-13 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171594351.753:2920): avc:  denied  { search } for  pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171594351.753:2920): arch=c000003e syscall=4 success=no exit=-13 a0=6c6240 a1=7fff1fbe2b80 a2=7fff1fbe2b80 a3=6c6240 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171594351.753:2921): avc:  denied  { search } for  pid=6117 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171594351.753:2921): arch=c000003e syscall=83 success=no exit=-13 a0=6c6240 a1=1ff a2=37a8f2f4d8 a3=6c6240 items=0 ppid=5986 pid=6117 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171594354.222:2922): avc:  denied  { ioctl } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594354.222:2922): arch=c000003e syscall=16 success=no exit=-13 a0=8 a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594354.222:2922):  path="/home/dhighley/.spamassassin/auto-whitelist.lock.douglas.highley-recommended.com.5986"
>type=AVC msg=audit(1171594354.222:2923): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594354.222:2923): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594355.669:2924): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594355.669:2924): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594356.612:2925): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594356.612:2925): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594357.687:2926): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594357.687:2926): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594358.724:2927): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594358.724:2927): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594359.848:2928): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594359.848:2928): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594360.727:2929): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594360.727:2929): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594362.210:2930): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594362.210:2930): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594362.945:2931): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594362.945:2931): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594363.827:2932): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594363.827:2932): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594364.888:2933): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594364.888:2933): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594365.707:2934): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594365.707:2934): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594366.833:2935): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594366.833:2935): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594368.074:2936): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594368.074:2936): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594369.503:2937): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594369.503:2937): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594370.719:2938): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594370.719:2938): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594371.390:2939): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594371.390:2939): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594372.232:2940): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594372.232:2940): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594373.173:2941): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594373.173:2941): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594374.128:2942): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594374.128:2942): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594374.875:2943): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594374.875:2943): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594376.290:2944): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594376.290:2944): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594377.107:2945): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594377.107:2945): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594377.869:2946): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594377.869:2946): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594379.316:2947): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594379.316:2947): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594380.799:2948): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594380.799:2948): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594381.845:2949): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594381.845:2949): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594382.578:2950): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594382.578:2950): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594383.581:2951): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594383.581:2951): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594384.476:2952): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594384.476:2952): arch=c000003e syscall=86 success=no exit=-13 a0=2d96b40 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594384.476:2953): avc:  denied  { unlink } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594384.476:2953): arch=c000003e syscall=87 success=no exit=-13 a0=2d96b40 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171594384.569:2954): avc:  denied  { write } for  pid=6113 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171594384.569:2954): arch=c000003e syscall=2 success=no exit=-13 a0=61fb70 a1=c1 a2=124 a3=61fb70 items=0 ppid=6110 pid=6113 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171594384.569:2955): avc:  denied  { append } for  pid=6113 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594384.569:2955): arch=c000003e syscall=2 success=no exit=-13 a0=619450 a1=441 a2=1b7 a3=619453 items=0 ppid=6110 pid=6113 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171594398.473:2956): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171594398.473:2957): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171594398.478:2958): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1171594410.087:2959): user pid=6123 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171594454.138:2960): user pid=6171 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594454.142:2961): user pid=6171 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594454.538:2962): user pid=6177 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594454.541:2963): user pid=6177 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594454.709:2964): user pid=6182 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594454.712:2965): user pid=6182 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594479.667:2966): user pid=6191 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594479.670:2967): user pid=6191 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594481.327:2968): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594481.331:2969): user pid=6197 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594482.338:2970): user pid=6203 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594482.341:2971): user pid=6203 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594485.191:2972): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594485.194:2973): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594501.232:2974): user pid=6220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171594501.232:2975): login pid=6220 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171594501.235:2976): user pid=6220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594501.235:2977): user pid=6220 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171594607.991:2978): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171594607.991:2979): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171594607.997:2980): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1171594615.320:2981): enforcing=0 old_enforcing=1 auid=1000
>type=SYSCALL msg=audit(1171594615.320:2981): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff00f82b80 a2=1 a3=0 items=0 ppid=6270 pid=6271 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_END msg=audit(1171594615.360:2982): user pid=6264 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171594661.630:2983): user pid=6316 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594661.630:2984): user pid=6316 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594661.881:2985): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594661.881:2986): user pid=6319 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=AVC msg=audit(1171594661.915:2987): avc:  denied  { lock } for  pid=6320 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594661.915:2987): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa82f0750 a3=6b5458 items=0 ppid=3105 pid=6320 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594661.915:2987):  path="/home/dhighley/Mail/Trash"
>type=USER_AUTH msg=audit(1171594662.014:2988): user pid=6323 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594662.014:2989): user pid=6323 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594683.169:2990): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594683.170:2991): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171594688.716:2992): user pid=6370 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594688.716:2993): user pid=6370 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171594688.726:2994): avc:  denied  { lock } for  pid=6371 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594688.726:2994): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff33a82ee0 a3=0 items=0 ppid=3105 pid=6371 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171594688.726:2994):  path="/home/dhighley/Mail/Trash"
>type=USER_AUTH msg=audit(1171594690.191:2995): user pid=6374 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594690.191:2996): user pid=6374 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=AVC msg=audit(1171594690.203:2997): avc:  denied  { write } for  pid=6375 comm="imap" name="Drafts" dev=dm-0 ino=12484611 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171594690.203:2997): arch=c000003e syscall=21 success=yes exit=0 a0=69e1b0 a1=6 a2=1b a3=6b0b98 items=0 ppid=3105 pid=6375 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=USER_AUTH msg=audit(1171594691.018:2998): user pid=6378 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594691.018:2999): user pid=6378 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.7, addr=::ffff:10.2.2.7, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171594801.576:3000): user pid=6453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171594801.577:3001): login pid=6453 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171594801.579:3002): user pid=6454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171594801.579:3003): login pid=6454 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171594801.581:3004): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594801.581:3005): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171594801.593:3006): user pid=6454 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594801.593:3007): user pid=6454 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171594801.931:3008): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171594801.931:3009): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171594861.937:3010): user pid=6469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171594861.937:3011): login pid=6469 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1171594861.940:3012): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171594861.940:3013): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171594862.859:3014): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171594862.861:3015): user pid=6469 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171595046.759:3016): avc:  denied  { append } for  pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595046.759:3016): arch=c000003e syscall=2 success=yes exit=11 a0=32f35d0 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595046.759:3017): avc:  denied  { ioctl } for  pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595046.759:3017): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595046.759:3017):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171595046.780:3018): avc:  denied  { append } for  pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595046.780:3018): arch=c000003e syscall=2 success=yes exit=8 a0=2fa8500 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595046.784:3019): avc:  denied  { ioctl } for  pid=5986 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595046.784:3019): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffa86d1de0 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595046.784:3019):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171595047.337:3020): avc:  denied  { search } for  pid=6515 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171595047.337:3020): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595047.337:3021): avc:  denied  { getattr } for  pid=6515 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.337:3021): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff515314d0 a2=7fff515314d0 a3=6c6280 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595047.337:3021):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171595047.338:3022): avc:  denied  { read } for  pid=6515 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.338:3022): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595047.338:3023): avc:  denied  { search } for  pid=6515 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595047.338:3023): avc:  denied  { write } for  pid=6515 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595047.338:3023): avc:  denied  { add_name } for  pid=6515 comm="pyzor" name="fQOOEu" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595047.338:3023): avc:  denied  { create } for  pid=6515 comm="pyzor" name="fQOOEu" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.338:3023): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595047.339:3024): avc:  denied  { getattr } for  pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.339:3024): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff5152fdd0 a2=7fff5152fdd0 a3=2 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595047.339:3024):  path="/tmp/fQOOEu"
>type=AVC msg=audit(1171595047.339:3025): avc:  denied  { write } for  pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.339:3025): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8864 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595047.339:3025):  path="/tmp/fQOOEu"
>type=AVC msg=audit(1171595047.339:3026): avc:  denied  { remove_name } for  pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595047.339:3026): avc:  denied  { unlink } for  pid=6515 comm="pyzor" name="fQOOEu" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.339:3026): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595047.378:3027): avc:  denied  { read } for  pid=6515 comm="pyzor" name="tmpjUxTnF" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595047.378:3027): arch=c000003e syscall=0 success=yes exit=4096 a0=4 a1=2aaaaf34d000 a2=1000 a3=267d items=0 ppid=5986 pid=6515 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595047.378:3027):  path=2F746D702F746D706A5578546E46202864656C6574656429
>type=AVC msg=audit(1171595051.545:3028): avc:  denied  { getattr } for  pid=6525 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595051.545:3028): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fff609f4720 a2=7fff609f4720 a3=6c6280 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595051.545:3028):  path="/home/phighley/.pyzor/servers"
>type=AVC msg=audit(1171595051.545:3029): avc:  denied  { read } for  pid=6525 comm="pyzor" name="servers" dev=dm-0 ino=12521755 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595051.545:3029): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595051.546:3030): avc:  denied  { search } for  pid=6525 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595051.546:3030): avc:  denied  { write } for  pid=6525 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171595051.546:3030): avc:  denied  { add_name } for  pid=6525 comm="pyzor" name="RownFR" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171595051.546:3030): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595051.546:3031): avc:  denied  { remove_name } for  pid=6525 comm="pyzor" name="RownFR" dev=dm-0 ino=30703640 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171595051.546:3031): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5987 pid=6525 auid=1000 uid=1003 gid=0 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171595052.299:3032): avc:  denied  { signal } for  pid=5986 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171595052.299:3032): arch=c000003e syscall=62 success=yes exit=0 a0=1973 a1=f a2=54 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595054.352:3033): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.352:3033): arch=c000003e syscall=86 success=yes exit=0 a0=32e2e60 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595054.352:3034): avc:  denied  { unlink } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.352:3034): arch=c000003e syscall=87 success=yes exit=0 a0=32e2e60 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595054.353:3035): avc:  denied  { write } for  pid=5986 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.353:3035): arch=c000003e syscall=2 success=yes exit=8 a0=1fdf080 a1=2 a2=0 a3=180 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171595054.451:3036): avc:  denied  { write } for  pid=6511 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171595054.451:3036): avc:  denied  { add_name } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171595054.451:3036): avc:  denied  { create } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.451:3036): arch=c000003e syscall=2 success=yes exit=6 a0=61b630 a1=c1 a2=124 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171595054.451:3037): avc:  denied  { write } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.451:3037): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595054.451:3037):  path="/home/dhighley/_vlB.u8R1FB.douglas"
>type=AVC msg=audit(1171595054.452:3038): avc:  denied  { getattr } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.452:3038): arch=c000003e syscall=4 success=yes exit=0 a0=61b630 a1=7fff24a6e440 a2=7fff24a6e440 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595054.452:3038):  path="/home/dhighley/_vlB.u8R1FB.douglas"
>type=AVC msg=audit(1171595054.452:3039): avc:  denied  { link } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.452:3039): arch=c000003e syscall=86 success=yes exit=0 a0=61b630 a1=623d80 a2=7fff24a6e360 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171595054.452:3040): avc:  denied  { remove_name } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171595054.452:3040): avc:  denied  { unlink } for  pid=6511 comm="procmail" name="_vlB.u8R1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.452:3040): arch=c000003e syscall=87 success=yes exit=0 a0=61b630 a1=623d80 a2=7fff24a6e360 a3=61b630 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171595054.452:3041): avc:  denied  { append } for  pid=6511 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595054.452:3041): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6508 pid=6511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171595056.734:3042): avc:  denied  { getattr } for  pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595056.734:3042): arch=c000003e syscall=4 success=yes exit=0 a0=619450 a1=7fffca3cbd90 a2=7fffca3cbd90 a3=619453 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595056.734:3042):  path="/home/phighley/spamlog"
>type=AVC msg=audit(1171595056.734:3043): avc:  denied  { append } for  pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595056.734:3043): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171595056.735:3044): avc:  denied  { lock } for  pid=6521 comm="procmail" name="spamlog" dev=dm-0 ino=12487642 scontext=system_u:system_r:procmail_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595056.735:3044): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=616b80 a3=0 items=0 ppid=6516 pid=6521 auid=4294967295 uid=1003 gid=1000 euid=1003 suid=1003 fsuid=1003 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595056.735:3044):  path="/home/phighley/spamlog"
>type=USER_ACCT msg=audit(1171595101.872:3045): user pid=6530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171595101.872:3046): login pid=6530 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171595101.876:3047): user pid=6530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171595101.876:3048): user pid=6530 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171595401.208:3049): user pid=6568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171595401.208:3050): login pid=6568 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171595401.210:3051): user pid=6569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171595401.211:3052): login pid=6569 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171595401.212:3053): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171595401.212:3054): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171595401.217:3055): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171595401.217:3056): user pid=6569 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171595401.234:3057): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171595401.234:3058): user pid=6568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171595406.271:3059): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171595406.271:3060): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171595406.276:3061): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1171595413.674:3062): enforcing=1 old_enforcing=0 auid=1000
>type=SYSCALL msg=audit(1171595413.674:3062): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe3536130 a2=1 a3=0 items=0 ppid=6590 pid=6591 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_END msg=audit(1171595413.725:3063): user pid=6583 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171595453.061:3064): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171595453.065:3065): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171595453.318:3066): user pid=6605 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171595453.321:3067): user pid=6605 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171595453.423:3068): user pid=6612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171595453.426:3069): user pid=6612 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1171595624.185:3070): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171595624.185:3071): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171595624.189:3072): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1171595631.046:3073): enforcing=0 old_enforcing=1 auid=1000
>type=SYSCALL msg=audit(1171595631.046:3073): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5984e450 a2=1 a3=0 items=0 ppid=6640 pid=6641 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_END msg=audit(1171595631.084:3074): user pid=6634 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171595701.586:3075): user pid=6651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171595701.587:3076): login pid=6651 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171595701.590:3077): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171595701.590:3078): user pid=6651 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1171595704.997:3079): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1171595704.997:3080): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1171595705.006:3081): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1171595717.475:3082): user pid=6663 uid=1000 auid=1000 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1171595725.308:3083): user pid=6671 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171595725.308:3084): user pid=6671 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=AVC msg=audit(1171595725.332:3085): avc:  denied  { lock } for  pid=6672 comm="imap" name="Trash" dev=dm-0 ino=12487136 scontext=system_u:system_r:dovecot_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171595725.332:3085): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffd5e5a2b0 a3=6b5458 items=0 ppid=3105 pid=6672 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171595725.332:3085):  path="/home/dhighley/Mail/Trash"
>type=USER_AUTH msg=audit(1171595725.428:3086): user pid=6675 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171595725.428:3087): user pid=6675 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=dhighley : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:10.2.2.3, addr=::ffff:10.2.2.3, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1171596001.947:3088): user pid=6737 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171596001.947:3089): login pid=6737 uid=0 old auid=4294967295 new auid=0
>type=USER_ACCT msg=audit(1171596001.949:3090): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171596001.950:3091): login pid=6738 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171596001.952:3092): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171596001.952:3093): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1171596001.956:3094): user pid=6738 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171596001.956:3095): user pid=6738 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1171596001.975:3096): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1171596001.975:3097): user pid=6737 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1171596301.301:3098): user pid=6778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1171596301.301:3099): login pid=6778 uid=0 old auid=4294967295 new auid=111
>type=USER_START msg=audit(1171596301.305:3100): user pid=6778 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1171596301.305:3101): user pid=6778 uid=0 auid=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=munin : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1171596381.774:3102): avc:  denied  { append } for  pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596381.774:3102): arch=c000003e syscall=2 success=yes exit=11 a0=33eca70 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596381.774:3103): avc:  denied  { ioctl } for  pid=5986 comm="spamd" name="bayes_journal" dev=dm-0 ino=15634184 scontext=user_u:system_r:spamd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596381.774:3103): arch=c000003e syscall=16 success=no exit=-25 a0=b a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596381.774:3103):  path="/home/dhighley/.spamassassin/bayes_journal"
>type=AVC msg=audit(1171596381.783:3104): avc:  denied  { append } for  pid=5986 comm="spamd" name="razor-agent.log" dev=dm-0 ino=15630908 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596381.783:3104): arch=c000003e syscall=2 success=yes exit=8 a0=32ece50 a1=441 a2=1b6 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596381.785:3105): avc:  denied  { ioctl } for  pid=5986 comm="spamd" name="server.c123.cloudmark.com.conf" dev=dm-0 ino=15634169 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596381.785:3105): arch=c000003e syscall=16 success=no exit=-25 a0=9 a1=5401 a2=7fffa86d1de0 a3=37a0af33d0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596381.785:3105):  path="/home/dhighley/.razor/server.c123.cloudmark.com.conf"
>type=AVC msg=audit(1171596382.352:3106): avc:  denied  { search } for  pid=6806 comm="pyzor" name="/" dev=autofs ino=10947 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:autofs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1171596382.352:3106): arch=c000003e syscall=2 success=no exit=-2 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171596382.352:3107): avc:  denied  { getattr } for  pid=6806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.352:3107): arch=c000003e syscall=4 success=yes exit=0 a0=6c6280 a1=7fffe574f6f0 a2=7fffe574f6f0 a3=6c6280 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596382.352:3107):  path="/home/dhighley/.pyzor/servers"
>type=AVC msg=audit(1171596382.353:3108): avc:  denied  { read } for  pid=6806 comm="pyzor" name="servers" dev=dm-0 ino=15630940 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.353:3108): arch=c000003e syscall=2 success=yes exit=3 a0=6c6280 a1=0 a2=1b6 a3=0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171596382.354:3109): avc:  denied  { search } for  pid=6806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171596382.354:3109): avc:  denied  { write } for  pid=6806 comm="pyzor" name="tmp" dev=dm-0 ino=30703617 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171596382.354:3109): avc:  denied  { add_name } for  pid=6806 comm="pyzor" name="feFjU5" scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171596382.354:3109): avc:  denied  { create } for  pid=6806 comm="pyzor" name="feFjU5" scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.354:3109): arch=c000003e syscall=2 success=yes exit=4 a0=61d5b0 a1=200c2 a2=180 a3=61d5b0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171596382.354:3110): avc:  denied  { getattr } for  pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.354:3110): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fffe574dff0 a2=7fffe574dff0 a3=2 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596382.354:3110):  path="/tmp/feFjU5"
>type=AVC msg=audit(1171596382.354:3111): avc:  denied  { write } for  pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.354:3111): arch=c000003e syscall=1 success=yes exit=4 a0=4 a1=2aaaaf34d000 a2=4 a3=2aaaae0d8bc4 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596382.354:3111):  path="/tmp/feFjU5"
>type=AVC msg=audit(1171596382.354:3112): avc:  denied  { remove_name } for  pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1171596382.354:3112): avc:  denied  { unlink } for  pid=6806 comm="pyzor" name="feFjU5" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.354:3112): arch=c000003e syscall=87 success=yes exit=0 a0=6233a0 a1=69b280 a2=37a8f2f4d8 a3=6233a0 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC msg=audit(1171596382.359:3113): avc:  denied  { read } for  pid=6806 comm="pyzor" name="tmpMDvjl-" dev=dm-0 ino=30703639 scontext=user_u:system_r:pyzor_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596382.359:3113): arch=c000003e syscall=0 success=yes exit=2172 a0=4 a1=6dc930 a2=2000 a3=3 items=0 ppid=5986 pid=6806 auid=1000 uid=1000 gid=0 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) comm="pyzor" exe="/usr/bin/python" subj=user_u:system_r:pyzor_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596382.359:3113):  path=2F746D702F746D704D44766A6C2D202864656C6574656429
>type=AVC msg=audit(1171596387.313:3114): avc:  denied  { signal } for  pid=5986 comm="spamd" scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:system_r:pyzor_t:s0 tclass=process
>type=SYSCALL msg=audit(1171596387.313:3114): arch=c000003e syscall=62 success=yes exit=0 a0=1a96 a1=f a2=54 a3=0 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596387.508:3115): avc:  denied  { link } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.508:3115): arch=c000003e syscall=86 success=yes exit=0 a0=30d0c90 a1=2dafbb0 a2=37a0b14937 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596387.508:3116): avc:  denied  { unlink } for  pid=5986 comm="spamd" name="auto-whitelist.lock.douglas.highley-recommended.com.5986" dev=dm-0 ino=15634255 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.508:3116): arch=c000003e syscall=87 success=yes exit=0 a0=30d0c90 a1=1cb4d90 a2=37a0b12b60 a3=5 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596387.509:3117): avc:  denied  { write } for  pid=5986 comm="spamd" name="auto-whitelist" dev=dm-0 ino=15631021 scontext=user_u:system_r:spamd_t:s0 tcontext=user_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.509:3117): arch=c000003e syscall=2 success=yes exit=8 a0=33e9b50 a1=2 a2=0 a3=180 items=0 ppid=5974 pid=5986 auid=1000 uid=0 gid=0 euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none) comm="spamd" exe="/usr/bin/perl" subj=user_u:system_r:spamd_t:s0 key=(null)
>type=AVC msg=audit(1171596387.518:3118): avc:  denied  { write } for  pid=6802 comm="procmail" name="dhighley" dev=dm-0 ino=12485695 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171596387.518:3118): avc:  denied  { add_name } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171596387.518:3118): avc:  denied  { create } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.518:3118): arch=c000003e syscall=2 success=yes exit=6 a0=61b650 a1=c1 a2=124 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171596387.519:3119): avc:  denied  { write } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.519:3119): arch=c000003e syscall=1 success=yes exit=1 a0=6 a1=413e68 a2=1 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596387.519:3119):  path="/home/dhighley/_SqB.jRS1FB.douglas"
>type=AVC msg=audit(1171596387.519:3120): avc:  denied  { getattr } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.519:3120): arch=c000003e syscall=4 success=yes exit=0 a0=61b650 a1=7fff85f038f0 a2=7fff85f038f0 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171596387.519:3120):  path="/home/dhighley/_SqB.jRS1FB.douglas"
>type=AVC msg=audit(1171596387.519:3121): avc:  denied  { link } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.519:3121): arch=c000003e syscall=86 success=yes exit=0 a0=61b650 a1=61e8f0 a2=7fff85f03810 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171596387.519:3122): avc:  denied  { remove_name } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1171596387.519:3122): avc:  denied  { unlink } for  pid=6802 comm="procmail" name="_SqB.jRS1FB.douglas" dev=dm-0 ino=12484631 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.519:3122): arch=c000003e syscall=87 success=yes exit=0 a0=61b650 a1=61e8f0 a2=7fff85f03810 a3=61b650 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1171596387.519:3123): avc:  denied  { append } for  pid=6802 comm="procmail" name="spamlog" dev=dm-0 ino=12487129 scontext=system_u:system_r:procmail_t:s0 tcontext=root:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1171596387.519:3123): arch=c000003e syscall=2 success=yes exit=6 a0=619450 a1=441 a2=1b7 a3=0 items=0 ppid=6799 pid=6802 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)

Actions: View

Attachments on bug 222778: 148169