Attachment 156527 Details for Bug 243219 – audit log

audit log

audit.log (text/plain), 35.71 KB, created by Phil Hale on 2007-06-07 23:21:46 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Phil Hale

Created: 2007-06-07 23:21:46 UTC

Size: 35.71 KB

patch

obsolete

>type=DAEMON_START msg=audit(1181243099.921:8596) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2025 res=success, auditd pid=2025
>type=CONFIG_CHANGE msg=audit(1181243100.020:32): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1181243100.036:33): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=ANOM_PROMISCUOUS msg=audit(1181243119.349:34): dev=peth0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181243119.349:34): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffd638dfa0 a3=0 items=0 ppid=2799 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1181243182.493:35): user pid=3510 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ERR msg=audit(1181243226.139:36): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181243237.440:37): user pid=3633 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181243237.440:38): user pid=3633 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181243237.440:39): user pid=3633 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181243237.444:40): login pid=3633 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181243237.444:41): user pid=3633 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181243237.444:42): user pid=3633 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181243258.921:43): user pid=3873 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181243258.921:44): user pid=3873 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181243258.981:45): user pid=3873 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181243315.616:46): user pid=3873 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1181244250.029:47): user pid=2185 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1181244250.029:48): user pid=3768 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1181244249.945:49): policy loaded auid=0
>type=SYSCALL msg=audit(1181244249.945:49): arch=c000003e syscall=1 success=yes exit=1549213 a0=4 a1=2aaaaaae1000 a2=17a39d a3=0 items=0 ppid=4036 pid=4037 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=root:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1181246462.156:50): user pid=4268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181246462.160:51): user pid=4268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181246462.160:52): login pid=4268 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181246462.272:53): user pid=4268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181246463.484:54): user pid=4268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181246463.484:55): user pid=4268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181250062.316:56): user pid=24809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181250062.320:57): user pid=24809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181250062.320:58): login pid=24809 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181250062.352:59): user pid=24809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181250063.068:60): user pid=24809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181250063.068:61): user pid=24809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181253661.880:62): user pid=25097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181253661.880:63): user pid=25097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181253661.880:64): login pid=25097 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181253661.912:65): user pid=25097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181253662.276:66): user pid=25097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181253662.276:67): user pid=25097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1181253920.665:68): avc:  denied  { write } for  pid=25132 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181253920.665:68): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25131 pid=25132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181253920.665:69): avc:  denied  { write } for  pid=25139 comm="vif-bridge" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181253920.665:69): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25138 pid=25139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181253921.065:70): dev=tap0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181253921.065:70): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7ffff4410fe0 a3=21000 items=0 ppid=25159 pid=25175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1181254020.664:71): avc:  denied  { write } for  pid=25200 comm="vif-bridge" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181254020.664:71): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25199 pid=25200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181254020.700:72): dev=tap0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1181254020.820:73): avc:  denied  { write } for  pid=25221 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181254020.820:73): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25216 pid=25221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181254020.824:74): avc:  denied  { write } for  pid=25215 comm="xen-hotplug-cle" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181254020.824:74): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25214 pid=25215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181254020.916:75): avc:  denied  { write } for  pid=25238 comm="xen-hotplug-cle" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181254020.916:75): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25216 pid=25238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255007.086:76): avc:  denied  { write } for  pid=25944 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255007.086:76): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25943 pid=25944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255007.102:77): avc:  denied  { write } for  pid=25946 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255007.102:77): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25945 pid=25946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181255007.182:78): dev=tap0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181255007.182:78): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffa4ddb9e0 a3=21000 items=0 ppid=25972 pid=25980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1181255007.222:79): avc:  denied  { write } for  pid=25964 comm="vif-bridge" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255007.222:79): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=25959 pid=25964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255107.465:80): avc:  denied  { write } for  pid=26215 comm="vif-bridge" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.465:80): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26214 pid=26215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255107.501:81): avc:  denied  { write } for  pid=26227 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.501:81): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26223 pid=26227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255107.533:82): avc:  denied  { write } for  pid=26225 comm="block" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.533:82): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26222 pid=26225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255107.549:83): avc:  denied  { write } for  pid=26246 comm="xen-hotplug-cle" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.549:83): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26245 pid=26246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181255107.561:84): dev=tap0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1181255107.617:85): avc:  denied  { write } for  pid=26254 comm="xen-hotplug-cle" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.617:85): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26222 pid=26254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181255107.629:86): avc:  denied  { write } for  pid=26258 comm="xen-hotplug-cle" name="xen" dev=dm-4 ino=17399829 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181255107.629:86): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=26223 pid=26258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1181255207.639:87): user pid=26476 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181255207.639:88): user pid=26476 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181255207.723:89): user pid=26476 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181255275.028:90): user pid=26476 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181255680.719:91): user pid=27633 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181255680.719:92): user pid=27633 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181255680.735:93): user pid=27633 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181255831.419:94): user pid=27633 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1181256740.647:95): user pid=2185 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1181256740.559:96): policy loaded auid=0
>type=SYSCALL msg=audit(1181256740.559:96): arch=c000003e syscall=1 success=yes exit=1549213 a0=4 a1=2aaaaaae1000 a2=17a39d a3=0 items=0 ppid=29906 pid=29919 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=root:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1181256740.651:97): user pid=3768 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=3) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1181256751.314:98): avc:  denied  { add_name } for  pid=29947 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256751.314:98): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=29946 pid=29947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181256751.390:99): avc:  denied  { add_name } for  pid=29964 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256751.390:99): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=29955 pid=29964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181256751.454:100): dev=tap0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181256751.454:100): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff148df4b0 a3=21000 items=0 ppid=29976 pid=29987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1181256851.626:101): avc:  denied  { add_name } for  pid=30252 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256851.626:101): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=30251 pid=30252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181256851.686:102): avc:  denied  { add_name } for  pid=30261 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256851.686:102): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=30259 pid=30261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181256851.738:103): avc:  denied  { add_name } for  pid=30274 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256851.738:103): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=30273 pid=30274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181256851.766:104): dev=tap0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1181256851.790:105): avc:  denied  { add_name } for  pid=30284 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181256851.790:105): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=30259 pid=30284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1181257101.646:106): user pid=30820 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181257101.646:107): user pid=30820 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181257101.662:108): user pid=30820 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181257261.387:109): user pid=31148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181257261.395:110): user pid=31148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181257261.395:111): login pid=31148 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181257261.431:112): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181257261.463:113): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181257261.463:114): user pid=31148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181257318.949:115): user pid=30820 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181257727.191:116): user pid=3633 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181257727.363:117): user pid=3633 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181257738.640:8597) auditd normal halt, sending auid=4294967295 pid=32429 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2025
>type=DAEMON_START msg=audit(1181257820.698:679) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2030 res=success, auditd pid=2030
>type=CONFIG_CHANGE msg=audit(1181257820.796:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1181257820.836:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=ANOM_PROMISCUOUS msg=audit(1181257847.154:7): dev=peth0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181257847.154:7): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff40a946a0 a3=21000 items=0 ppid=2813 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=USER_ERR msg=audit(1181257850.490:8): user pid=3302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181257861.109:9): user pid=3375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181257861.109:10): user pid=3375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181257861.109:11): user pid=3375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181257861.109:12): login pid=3375 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181257861.117:13): user pid=3375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181257861.117:14): user pid=3375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1181257876.261:15): avc:  denied  { add_name } for  pid=3651 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257876.261:15): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3649 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181257876.329:16): avc:  denied  { add_name } for  pid=3644 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257876.329:16): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3643 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181257876.429:17): dev=tap0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181257876.429:17): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffa9e9ca70 a3=21000 items=0 ppid=3691 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1181257976.421:18): avc:  denied  { add_name } for  pid=3751 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257976.421:18): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3750 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181257976.465:19): avc:  denied  { add_name } for  pid=3762 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257976.465:19): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3760 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181257976.529:20): dev=tap0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1181257976.533:21): avc:  denied  { add_name } for  pid=3774 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257976.533:21): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3773 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181257976.609:22): avc:  denied  { add_name } for  pid=3783 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181257976.609:22): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3760 pid=3783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181258243.490:23): dev=tap0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1181258243.490:23): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffedd66940 a3=21000 items=0 ppid=3842 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1181258243.502:24): avc:  denied  { add_name } for  pid=3839 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258243.502:24): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3833 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181258243.530:25): avc:  denied  { add_name } for  pid=3829 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258243.530:25): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3828 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181258343.638:26): avc:  denied  { add_name } for  pid=3886 comm="vif-bridge" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258343.638:26): arch=c000003e syscall=2 success=no exit=-13 a0=8cc7f0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3885 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vif-bridge" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181258343.710:27): avc:  denied  { add_name } for  pid=3897 comm="block" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258343.710:27): arch=c000003e syscall=2 success=no exit=-13 a0=8cd050 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3894 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="block" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1181258343.734:28): avc:  denied  { add_name } for  pid=3906 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258343.734:28): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3905 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1181258343.762:29): dev=tap0 prom=0 old_prom=256 auid=4294967295
>type=AVC msg=audit(1181258343.818:30): avc:  denied  { add_name } for  pid=3919 comm="xen-hotplug-cle" name="xen-hotplug.log" scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181258343.818:30): arch=c000003e syscall=2 success=no exit=-13 a0=8ca1c0 a1=441 a2=1b6 a3=354394b9d0 items=0 ppid=3894 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xen-hotplug-cle" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)

Actions: View

Attachments on bug 243219: 156526 | 156527