Attachment 161727 Details for Bug 243658 – My audit.log

My audit.log

audit.log (text/plain), 1.02 MB, created by Ingemar Nilsson on 2007-08-17 11:58:20 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ingemar Nilsson

Created: 2007-08-17 11:58:20 UTC

Size: 1.02 MB

patch

obsolete

>type=DAEMON_START msg=audit(1181081594.564:5804) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2178 res=success, auditd pid=2178
>type=CONFIG_CHANGE msg=audit(1181081594.597:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181081594.597:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181081594.597:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181081594.597:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USYS_CONFIG msg=audit(1181081699.081:42): user pid=2946 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ERR msg=audit(1181081763.071:43): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181081776.069:44): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181081776.069:45): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181081776.069:46): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181081776.069:47): login pid=3050 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181081776.069:48): user pid=3050 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181081776.069:49): user pid=3050 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181082043.371:50): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181082043.371:51): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181082043.371:52): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181082043.371:53): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181082948.890:54): user pid=3555 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181082948.890:55): user pid=3555 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181082949.390:56): user pid=3555 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181083018.391:57): user pid=3555 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1181083061.391:58): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181083061.391:59): user pid=3391 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181083077.391:60): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181083077.391:61): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181083077.391:62): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181083094.391:63): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181083106.891:64): user pid=3050 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181083106.891:65): user pid=3050 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181083116.209:5805) auditd normal halt, sending auid=4294967295 pid=4132 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2178
>type=DAEMON_START msg=audit(1181083199.486:8126) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2162 res=success, auditd pid=2162
>type=CONFIG_CHANGE msg=audit(1181083199.482:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181083199.482:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181083199.482:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181083199.482:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181083219.980:42): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181083233.481:43): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181083233.481:44): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181083233.481:45): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181083233.481:46): login pid=2940 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181083233.481:47): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181083233.481:48): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181083362.481:49): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181083362.481:50): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181083362.481:51): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181083362.481:52): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181083564.983:53): user pid=3328 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181083564.983:54): user pid=3328 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181083564.983:55): user pid=3328 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181083875.985:56): user pid=3328 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1181083888.485:57): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181083888.485:58): user pid=3232 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181084154.987:59): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181084154.987:60): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181084164.671:8127) auditd normal halt, sending auid=4294967295 pid=5042 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2162
>type=DAEMON_START msg=audit(1181086132.452:512) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2152 res=success, auditd pid=2152
>type=CONFIG_CHANGE msg=audit(1181086132.450:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181086132.450:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181086132.450:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181086132.450:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181086152.947:42): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181086295.925:43): user pid=2818 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181086295.925:44): user pid=2818 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181086295.925:45): user pid=2818 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181086295.925:46): login pid=2818 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181086296.425:47): user pid=2818 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181086296.425:48): user pid=2818 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181086318.422:49): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181086318.422:50): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181086318.422:51): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181086332.420:52): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181086346.917:53): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181086346.917:54): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181086346.917:55): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181086346.917:56): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181086464.899:57): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181086464.899:58): user pid=3145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181086470.399:59): user pid=2818 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181086470.399:60): user pid=2818 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181086476.309:513) auditd normal halt, sending auid=4294967295 pid=3640 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2152
>type=DAEMON_START msg=audit(1181086552.996:7424) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1968 res=success, auditd pid=1968
>type=CONFIG_CHANGE msg=audit(1181086552.949:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181086552.949:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181086552.949:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181086552.949:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181086573.446:42): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181086586.944:43): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181086586.944:44): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181086586.944:45): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181086587.444:46): login pid=2634 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181086587.444:47): user pid=2634 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181086587.444:48): user pid=2634 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181088061.561:49): user pid=2931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181088061.561:50): user pid=2931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181088061.561:51): login pid=2931 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181088061.561:52): user pid=2931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181088061.561:53): user pid=2931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181088061.561:54): user pid=2931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181089473.608:55): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181089473.608:56): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181089473.608:57): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181089473.608:58): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181089512.104:59): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181089512.104:60): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181089512.104:61): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181089512.104:62): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181089631.591:63): user pid=3140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181089631.591:64): user pid=3140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181089631.591:65): user pid=3140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181089640.090:66): user pid=3140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1181089985.555:67): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181089985.555:68): user pid=3024 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181090284.036:69): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181090284.036:70): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181090284.036:71): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181090284.036:72): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181090705.504:73): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181090705.504:74): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181090705.504:75): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181090705.504:76): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181090981.489:77): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181090981.489:78): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181090981.989:79): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181090981.989:80): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181091001.487:81): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181091001.487:82): user pid=3538 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1181091020.486:83): avc:  denied  { search } for  pid=3839 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091020.486:83): arch=40000003 syscall=33 success=no exit=-13 a0=9c0bee8 a1=4 a2=8a0f18 a3=9c0420c items=0 ppid=3837 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=AVC msg=audit(1181091020.486:84): avc:  denied  { write } for  pid=3839 comm="alsactl" name="etc" dev=sda8 ino=262145 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091020.486:84): arch=40000003 syscall=5 success=no exit=-13 a0=8050db4 a1=241 a2=1b6 a3=9c0c620 items=0 ppid=3837 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1181091022.486:85): user pid=3874 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181091050.982:86): user pid=3954 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1181091050.982:87): avc:  denied  { search } for  pid=3989 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091050.982:87): arch=40000003 syscall=33 success=no exit=-13 a0=9689ee8 a1=4 a2=b64f18 a3=968220c items=0 ppid=3987 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=AVC msg=audit(1181091101.476:88): avc:  denied  { search } for  pid=4237 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091101.476:88): arch=40000003 syscall=33 success=no exit=-13 a0=9671ee8 a1=4 a2=1eaf18 a3=966a20c items=0 ppid=4235 pid=4237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=AVC msg=audit(1181091101.476:89): avc:  denied  { write } for  pid=4237 comm="alsactl" name="etc" dev=sda8 ino=262145 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091101.476:89): arch=40000003 syscall=5 success=no exit=-13 a0=8050db4 a1=241 a2=1b6 a3=9672620 items=0 ppid=4235 pid=4237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1181091102.475:90): user pid=4272 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181091192.941:91): user pid=4351 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1181091192.941:92): avc:  denied  { search } for  pid=4365 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181091192.941:92): arch=40000003 syscall=33 success=no exit=-13 a0=8f29ee8 a1=4 a2=a0ef18 a3=8f2220c items=0 ppid=4363 pid=4365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=USER_END msg=audit(1181091226.937:93): user pid=2634 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181091226.937:94): user pid=2634 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181091237.374:7425) auditd normal halt, sending auid=4294967295 pid=4959 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1968
>type=DAEMON_START msg=audit(1181116448.031:2588) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1984 res=success, auditd pid=1984
>type=CONFIG_CHANGE msg=audit(1181116447.940:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181116447.940:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181116447.940:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181116447.940:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181116469.437:42): user pid=2586 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181116510.431:43): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181116510.431:44): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181116510.431:45): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181116510.431:46): login pid=2650 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181116510.431:47): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181116510.431:48): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181116689.906:49): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181116689.906:50): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181116689.906:51): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181116689.906:52): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181116700.405:53): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181116700.405:54): user pid=2974 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181116862.382:55): user pid=3040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181116862.382:56): user pid=3040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181116862.382:57): login pid=3040 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181116862.882:58): user pid=3040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181116864.382:59): user pid=3040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181116864.382:60): user pid=3040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181117416.923:61): user pid=3070 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181117416.923:62): user pid=3070 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181117417.423:63): user pid=3070 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181117423.922:64): user pid=3070 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181117549.406:65): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181117549.406:66): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181117549.406:67): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181117549.406:68): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181117556.906:69): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181117556.906:70): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181117556.906:71): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181117556.906:72): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181117821.379:73): user pid=3517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181117821.379:74): user pid=3517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181117821.379:75): user pid=3517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181118216.353:76): user pid=3871 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181118216.353:77): user pid=3871 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181118216.853:78): user pid=3871 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181118287.848:79): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181118287.848:80): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181118287.848:81): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181118297.347:82): user pid=3871 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181118307.346:83): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181118327.844:84): user pid=3517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1181118363.841:85): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181118363.841:86): user pid=3134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181118365.841:87): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181118365.841:88): user pid=3086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181118374.840:89): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181118374.840:90): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181118387.839:91): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181118387.839:92): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181118387.839:93): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181118387.839:94): login pid=2650 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1181118387.839:95): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181118387.839:96): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181118413.337:97): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181118413.337:98): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181118413.337:99): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181118413.337:100): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181118430.836:101): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181118430.836:102): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181118430.836:103): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181118452.834:104): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181118968.445:105): user pid=4813 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181118968.445:106): user pid=4813 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181118968.445:107): user pid=4813 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181119091.930:108): user pid=4813 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181120461.329:109): user pid=4872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181120461.329:110): user pid=4872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181120461.329:111): login pid=4872 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181120461.329:112): user pid=4872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181120461.329:113): user pid=4872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181120461.329:114): user pid=4872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1181123424.312:115): avc:  denied  { search } for  pid=5044 comm="procmail" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181123424.312:115): arch=40000003 syscall=5 success=no exit=-13 a0=9bffd90 a1=8000 a2=0 a3=8000 items=0 ppid=5043 pid=5044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1181123669.799:116): avc:  denied  { read } for  pid=10325 comm="updatedb" name="/" dev=sda1 ino=1 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181123669.799:116): arch=40000003 syscall=5 success=no exit=-13 a0=804e389 a1=58000 a2=0 a3=58000 items=0 ppid=10320 pid=10325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1181123669.799:117): avc:  denied  { read } for  pid=10325 comm="updatedb" name="/" dev=sda5 ino=1 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181123669.799:117): arch=40000003 syscall=5 success=no exit=-13 a0=804e389 a1=58000 a2=0 a3=58000 items=0 ppid=10320 pid=10325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1181123670.299:118): avc:  denied  { read } for  pid=10325 comm="updatedb" name="/" dev=sda6 ino=5 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181123670.299:118): arch=40000003 syscall=5 success=no exit=-13 a0=804e389 a1=58000 a2=0 a3=58000 items=0 ppid=10320 pid=10325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181124060.940:119): user pid=13109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181124060.940:120): user pid=13109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181124060.940:121): login pid=13109 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181124060.940:122): user pid=13109 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181124060.940:123): user pid=13109 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181124060.940:124): user pid=13109 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181124591.381:125): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181124591.381:126): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181124591.381:127): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181124591.381:128): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181125419.321:129): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181125419.321:130): user pid=13539 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1181125436.320:131): user pid=14892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181125436.320:132): user pid=14892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181125436.320:133): user pid=14892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181125505.319:134): user pid=14892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1181125889.311:135): user pid=15477 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=jackuser exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181126546.430:136): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181126546.430:137): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181126546.430:138): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181126546.430:139): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181126699.412:140): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181126699.412:141): user pid=15583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181126707.911:142): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181126707.911:143): user pid=4282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181126878.393:144): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181126878.393:145): user pid=2650 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181126890.926:2589) auditd normal halt, sending auid=4294967295 pid=16258 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1984
>type=DAEMON_START msg=audit(1181145885.941:937) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1985 res=success, auditd pid=1985
>type=CONFIG_CHANGE msg=audit(1181145885.802:38): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181145885.802:39): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181145885.802:40): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181145885.802:41): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181145910.799:42): user pid=2607 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181145953.794:43): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181145953.794:44): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181145953.794:45): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181145953.794:46): login pid=2677 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181145953.794:47): user pid=2677 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181145953.794:48): user pid=2677 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181146579.909:49): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181146579.909:50): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181146580.409:51): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181146580.409:52): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181146992.365:53): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181146992.365:54): user pid=3471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1181147056.360:55): avc:  denied  { search } for  pid=3920 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181147056.360:55): arch=40000003 syscall=33 success=no exit=-13 a0=9a68ee8 a1=4 a2=4ccd8f18 a3=9a6120c items=0 ppid=3918 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=AVC msg=audit(1181147056.360:56): avc:  denied  { write } for  pid=3920 comm="alsactl" name="etc" dev=sda8 ino=262145 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181147056.360:56): arch=40000003 syscall=5 success=no exit=-13 a0=8050db4 a1=241 a2=1b6 a3=9a69620 items=0 ppid=3918 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1181147058.359:57): user pid=3955 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181208735.838:58): user pid=4048 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1181208735.838:59): avc:  denied  { search } for  pid=4070 comm="alsactl" name="root" dev=sda8 ino=2195457 scontext=system_u:system_r:alsa_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181208735.838:59): arch=40000003 syscall=33 success=no exit=-13 a0=8b4dee8 a1=4 a2=4ccd8f18 a3=8b4620c items=0 ppid=4068 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="alsactl" exe="/sbin/alsactl" subj=system_u:system_r:alsa_t:s0 key=(null)
>type=USER_AUTH msg=audit(1181208770.334:60): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181208770.334:61): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181208770.334:62): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181208770.334:63): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AVC msg=audit(1181208812.329:64): user pid=2057 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1181208812.329:65): policy loaded auid=500
>type=SYSCALL msg=audit(1181208812.329:65): arch=40000003 syscall=4 success=yes exit=1549213 a0=4 a1=b7da2000 a2=17a39d a3=bfcf7258 items=0 ppid=4370 pid=4371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=CRED_DISP msg=audit(1181208827.827:66): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181208827.827:67): user pid=4228 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181209598.854:68): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181209598.854:69): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181209598.854:70): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181209598.854:71): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181210199.810:72): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181210199.810:73): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181210199.810:74): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181210199.810:75): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181210207.810:76): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181210207.810:77): user pid=31678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181210214.810:78): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181210214.810:79): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181210214.810:80): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181210214.810:81): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181210264.308:82): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181210264.308:83): user pid=5304 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181210461.301:84): user pid=13373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181210461.301:85): user pid=13373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181210461.301:86): login pid=13373 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181210461.301:87): user pid=13373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181210461.301:88): user pid=13373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181210461.301:89): user pid=13373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181214061.292:90): user pid=12241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181214061.292:91): user pid=12241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181214061.292:92): login pid=12241 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181214061.292:93): user pid=12241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181214061.292:94): user pid=12241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181214061.292:95): user pid=12241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181214881.295:96): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181214881.295:97): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181214881.295:98): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181214881.295:99): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181214939.294:100): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181214939.294:101): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181214939.294:102): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181214939.294:103): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181215057.295:104): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181215057.295:105): user pid=25591 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181216981.300:106): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181216981.300:107): user pid=4592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181217040.801:108): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181217040.801:109): user pid=15313 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181217661.302:110): user pid=6314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181217661.302:111): user pid=6314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181217661.302:112): login pid=6314 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181217661.302:113): user pid=6314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181217661.302:114): user pid=6314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181217661.302:115): user pid=6314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1181218472.303:116): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181218493.800:117): user pid=6603 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181218694.787:118): user pid=6846 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181218694.787:119): user pid=6846 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1181218695.287:120): user pid=6846 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1181218695.287:121): user pid=6846 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=MAC_STATUS msg=audit(1181218735.785:122): enforcing=0 old_enforcing=1 auid=500
>type=USER_AVC msg=audit(1181218735.785:123): user pid=2057 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181218735.785:122): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd33f54 a2=1 a3=bfd33f54 items=0 ppid=6849 pid=6882 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181218751.284:124): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1181218751.284:125): user pid=2057 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181218751.284:124): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfa5cc84 a2=1 a3=bfa5cc84 items=0 ppid=6849 pid=6885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_END msg=audit(1181219014.268:126): user pid=2677 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181219014.268:127): user pid=2677 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181219020.607:938) auditd normal halt, sending auid=4294967295 pid=7369 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1985
>type=DAEMON_START msg=audit(1181219125.585:2539) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2063 res=success, auditd pid=2063
>type=CONFIG_CHANGE msg=audit(1181219125.411:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181219125.411:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181219125.411:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181219125.411:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181219147.409:9): user pid=2679 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181219159.909:10): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181219159.909:11): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181219159.909:12): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181219159.909:13): login pid=2764 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181219159.909:14): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181219159.909:15): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181219679.026:16): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181219679.026:17): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181219679.026:18): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181219679.026:19): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181219710.524:20): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181219710.524:21): user pid=3274 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181219716.524:22): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181219716.524:23): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181219728.523:24): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181219728.523:25): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181219728.523:26): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181219728.523:27): login pid=2764 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1181219728.523:28): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181219728.523:29): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181219979.007:30): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181219979.007:31): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1181219979.007:32): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1181219979.007:33): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1181220074.001:34): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1181220074.001:35): user pid=3888 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1181220490.485:36): user pid=3983 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181220490.485:37): user pid=3983 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181220490.485:38): user pid=3983 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181220490.485:39): user pid=3983 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=MAC_STATUS msg=audit(1181220509.984:40): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1181220509.984:40): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfaea514 a2=1 a3=bfaea514 items=0 ppid=3986 pid=4017 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181220509.984:41): user pid=2135 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_END msg=audit(1181220600.981:42): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181220600.981:43): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181220607.358:2540) auditd normal halt, sending auid=4294967295 pid=4547 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2063
>type=DAEMON_START msg=audit(1181220704.534:5070) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2065 res=success, auditd pid=2065
>type=CONFIG_CHANGE msg=audit(1181220704.382:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181220704.382:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181220704.382:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181220704.382:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181220724.380:9): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181220736.879:10): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181220736.879:11): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181220736.879:12): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181220736.879:13): login pid=2766 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181220736.879:14): user pid=2766 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181220736.879:15): user pid=2766 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181220808.375:16): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181220808.375:17): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181220808.375:18): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181220808.375:19): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181221261.887:20): user pid=24513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181221261.887:21): user pid=24513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181221261.887:22): login pid=24513 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181221261.887:23): user pid=24513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181221261.887:24): user pid=24513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181221261.887:25): user pid=24513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181224860.873:26): user pid=2180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181224860.873:27): user pid=2180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181224860.873:28): login pid=2180 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181224860.873:29): user pid=2180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181224860.873:30): user pid=2180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181224860.873:31): user pid=2180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181225339.369:32): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181225339.369:33): user pid=3226 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181225345.869:34): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181225345.869:35): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181225345.869:36): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181225345.869:37): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181225365.869:38): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181225365.869:39): user pid=19088 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1181227557.355:40): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181227557.355:41): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181227557.355:42): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181227557.355:43): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=MAC_STATUS msg=audit(1181227579.855:44): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1181227579.855:44): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf8ceaf4 a2=1 a3=bf8ceaf4 items=0 ppid=19302 pid=19334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181227579.855:45): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_STATUS msg=audit(1181227652.355:46): enforcing=1 old_enforcing=0 auid=500
>type=SYSCALL msg=audit(1181227652.355:46): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfb49d74 a2=1 a3=bfb49d74 items=0 ppid=19302 pid=19342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181227652.355:47): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1181227719.355:48): avc:  denied  { search } for  pid=21924 comm="updatedb" scontext=system_u:system_r:locate_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key
>type=SYSCALL msg=audit(1181227719.355:48): arch=40000003 syscall=196 success=yes exit=0 a0=bfd3cf78 a1=bfd3cd98 a2=4bd66ff4 a3=9246a2d items=0 ppid=21919 pid=21924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181228461.353:49): user pid=22876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181228461.353:50): user pid=22876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181228461.353:51): login pid=22876 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181228461.353:52): user pid=22876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181228461.353:53): user pid=22876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181228461.353:54): user pid=22876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181228830.853:55): user pid=22898 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_AUTH msg=audit(1181228855.854:56): user pid=22899 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_AUTH msg=audit(1181228910.854:57): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181228910.854:58): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181228910.854:59): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181228910.854:60): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181228945.354:61): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181228945.354:62): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1181228945.354:63): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1181228945.354:64): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=MAC_STATUS msg=audit(1181228997.854:65): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1181228997.854:65): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfa0ac34 a2=1 a3=bfa0ac34 items=0 ppid=22969 pid=23000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181228997.854:66): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_STATUS msg=audit(1181229019.854:67): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1181229019.854:68): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181229019.854:67): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfcd26f4 a2=1 a3=bfcd26f4 items=0 ppid=22969 pid=23003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181229369.357:69): enforcing=0 old_enforcing=1 auid=500
>type=USER_AVC msg=audit(1181229369.357:70): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181229369.357:69): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd2df54 a2=1 a3=bfd2df54 items=0 ppid=22969 pid=23058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181229558.866:71): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1181229558.866:72): user pid=2137 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181229558.866:71): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf8e6b14 a2=1 a3=bf8e6b14 items=0 ppid=22969 pid=23071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AUTH msg=audit(1181229620.869:73): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181229620.869:74): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181229620.869:75): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181229620.869:76): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181229642.370:77): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181229642.370:78): user pid=23074 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1181229806.375:79): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181229806.375:80): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181229806.375:81): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181229806.375:82): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1181230174.886:83): user pid=23213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181230174.886:84): user pid=23213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181230174.886:85): user pid=23213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181230354.891:86): user pid=23213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181230699.895:87): user pid=23234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181230699.895:88): user pid=23234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1181230699.895:89): user pid=23234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1181230711.395:90): user pid=23234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1181232061.404:91): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181232061.404:92): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181232061.404:93): login pid=23419 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181232061.404:94): user pid=23419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181232061.404:95): user pid=23419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181232061.404:96): user pid=23419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181232158.904:97): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181232158.904:98): user pid=19299 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181232160.404:99): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1181232160.404:100): user pid=22966 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1181232163.904:101): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181232163.904:102): user pid=22903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181232186.904:103): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181232186.904:104): user pid=23128 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1181232336.904:105): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181232336.904:106): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181232336.904:107): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181232336.904:108): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181232372.904:109): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181232372.904:110): user pid=23471 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1181232416.904:111): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1181232416.904:112): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1181232416.904:113): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1181232416.904:114): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1181232448.404:115): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181232448.404:116): user pid=23533 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1181232730.403:117): user pid=2766 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181232730.403:118): user pid=2766 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181232737.594:5071) auditd normal halt, sending auid=4294967295 pid=24043 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2065
>type=DAEMON_START msg=audit(1181292758.601:5844) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2057 res=success, auditd pid=2057
>type=CONFIG_CHANGE msg=audit(1181292758.459:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181292758.459:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181292758.459:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181292758.459:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181292784.457:9): user pid=2703 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181292800.457:10): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181292800.457:11): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181292800.457:12): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181292800.457:13): login pid=2790 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181292800.457:14): user pid=2790 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181292800.457:15): user pid=2790 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181292849.455:16): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181292849.455:17): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181292849.455:18): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181292849.455:19): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181293261.965:20): user pid=3412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181293261.965:21): user pid=3412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181293261.965:22): login pid=3412 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181293261.965:23): user pid=3412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181293261.965:24): user pid=3412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181293261.965:25): user pid=3412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181296860.929:26): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181296860.929:27): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181296860.929:28): login pid=3546 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181296860.929:29): user pid=3546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181296860.929:30): user pid=3546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181296860.929:31): user pid=3546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181297465.428:32): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181297465.428:33): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181297465.428:34): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181297465.428:35): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1181299772.922:36): avc:  denied  { search } for  pid=6921 comm="updatedb" scontext=system_u:system_r:locate_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key
>type=SYSCALL msg=audit(1181299772.922:36): arch=40000003 syscall=196 success=yes exit=0 a0=bfc8da78 a1=bfc8d898 a2=4bd66ff4 a3=9a36a2d items=0 ppid=6916 pid=6921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181300461.419:37): user pid=8122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181300461.419:38): user pid=8122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181300461.419:39): login pid=8122 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181300461.419:40): user pid=8122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181300461.419:41): user pid=8122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181300461.419:42): user pid=8122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181304061.908:43): user pid=9091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181304061.908:44): user pid=9091 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181304061.908:45): login pid=9091 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181304061.908:46): user pid=9091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181304061.908:47): user pid=9091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181304061.908:48): user pid=9091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181304817.406:49): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181304817.406:50): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181304817.406:51): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181304817.406:52): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1181305355.904:53): user pid=9354 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=postdrop exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1181305356.404:54): user pid=9358 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=postfix exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1181305356.404:55): user pid=9362 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=mail exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1181305356.404:56): user pid=9363 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=postfix exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1181305356.404:57): user pid=9363 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user to group acct=postfix exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_CHAUTHTOK msg=audit(1181305356.404:58): user pid=9363 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user to shadow group acct=postfix exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181307661.396:59): user pid=10321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181307661.396:60): user pid=10321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181307661.396:61): login pid=10321 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181307661.396:62): user pid=10321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181307661.396:63): user pid=10321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181307661.396:64): user pid=10321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181311261.885:65): user pid=10627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181311261.885:66): user pid=10627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181311261.885:67): login pid=10627 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181311261.885:68): user pid=10627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181311261.885:69): user pid=10627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181311261.885:70): user pid=10627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181314860.869:71): user pid=10942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181314860.869:72): user pid=10942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181314860.869:73): login pid=10942 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181314860.869:74): user pid=10942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181314860.869:75): user pid=10942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181314860.869:76): user pid=10942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1181316369.362:77): user pid=11170 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1181316731.860:78): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1181316731.860:79): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1181316731.860:80): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1181316731.860:81): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_DISP msg=audit(1181316874.360:82): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1181316874.360:83): user pid=11229 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_AUTH msg=audit(1181316962.859:84): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=USER_ACCT msg=audit(1181316962.859:85): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=USER_START msg=audit(1181316962.859:86): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=CRED_ACQ msg=audit(1181316962.859:87): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=CRED_DISP msg=audit(1181317020.859:88): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=USER_END msg=audit(1181317020.859:89): user pid=11343 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/11 res=success)'
>type=USER_ACCT msg=audit(1181318460.851:90): user pid=11638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181318460.851:91): user pid=11638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181318460.851:92): login pid=11638 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181318460.851:93): user pid=11638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181318460.851:94): user pid=11638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181318460.851:95): user pid=11638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181322060.835:96): user pid=11822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181322060.835:97): user pid=11822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181322060.835:98): login pid=11822 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181322060.835:99): user pid=11822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181322061.335:100): user pid=11822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181322061.335:101): user pid=11822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181322672.833:102): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181322672.833:103): user pid=9190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181322673.833:104): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181322673.833:105): user pid=3678 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1181323129.831:106): avc:  denied  { search } for  pid=12592 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323129.831:106): arch=40000003 syscall=195 success=no exit=-13 a0=bfacc280 a1=bfacd2dc a2=a000 a3=9acfa10 items=0 ppid=12591 pid=12592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323129.831:107): avc:  denied  { search } for  pid=12592 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323129.831:107): arch=40000003 syscall=195 success=no exit=-13 a0=bfacc280 a1=bfacd2dc a2=a000 a3=9acfa10 items=0 ppid=12591 pid=12592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323129.831:108): avc:  denied  { search } for  pid=12592 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323129.831:108): arch=40000003 syscall=195 success=no exit=-13 a0=bfacc280 a1=bfacd2dc a2=a000 a3=9acfa10 items=0 ppid=12591 pid=12592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323164.831:109): avc:  denied  { search } for  pid=12593 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323164.831:109): arch=40000003 syscall=195 success=no exit=-13 a0=bfc0cb60 a1=bfc0dbbc a2=a000 a3=90f8a10 items=0 ppid=3216 pid=12593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323164.831:110): avc:  denied  { search } for  pid=12593 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323164.831:110): arch=40000003 syscall=195 success=no exit=-13 a0=bfc0cb60 a1=bfc0dbbc a2=a000 a3=90f8a10 items=0 ppid=3216 pid=12593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323164.831:111): avc:  denied  { search } for  pid=12593 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323164.831:111): arch=40000003 syscall=195 success=no exit=-13 a0=bfc0cb60 a1=bfc0dbbc a2=a000 a3=90f8a10 items=0 ppid=3216 pid=12593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323181.831:112): avc:  denied  { search } for  pid=12594 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323181.831:112): arch=40000003 syscall=195 success=no exit=-13 a0=bffe1730 a1=bffe278c a2=a000 a3=89e4a10 items=0 ppid=3216 pid=12594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323181.831:113): avc:  denied  { search } for  pid=12594 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323181.831:113): arch=40000003 syscall=195 success=no exit=-13 a0=bffe1730 a1=bffe278c a2=a000 a3=89e4a10 items=0 ppid=3216 pid=12594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323181.831:114): avc:  denied  { search } for  pid=12594 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323181.831:114): arch=40000003 syscall=195 success=no exit=-13 a0=bffe1730 a1=bffe278c a2=a000 a3=89e4a10 items=0 ppid=3216 pid=12594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323196.331:115): avc:  denied  { search } for  pid=12595 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323196.331:115): arch=40000003 syscall=195 success=no exit=-13 a0=bf8997f0 a1=bf89a84c a2=a000 a3=839aa10 items=0 ppid=3216 pid=12595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323196.331:116): avc:  denied  { search } for  pid=12595 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323196.331:116): arch=40000003 syscall=195 success=no exit=-13 a0=bf8997f0 a1=bf89a84c a2=a000 a3=839aa10 items=0 ppid=3216 pid=12595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181323196.331:117): avc:  denied  { search } for  pid=12595 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181323196.331:117): arch=40000003 syscall=195 success=no exit=-13 a0=bf8997f0 a1=bf89a84c a2=a000 a3=839aa10 items=0 ppid=3216 pid=12595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181323205.830:118): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1181323205.830:118): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf833254 a2=1 a3=bf833254 items=0 ppid=3216 pid=12597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181323205.830:119): user pid=2129 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1181323207.330:120): avc:  denied  { search } for  pid=12598 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=AVC msg=audit(1181323207.330:120): avc:  denied  { getattr } for  pid=12598 comm="ldconfig" name="libxerces-c1_6_0.so" dev=sda8 ino=1507426 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1181323207.330:120): arch=40000003 syscall=195 success=yes exit=0 a0=bfdf8550 a1=bfdf95ac a2=a000 a3=8464a10 items=0 ppid=3216 pid=12598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181323207.330:120):  path="/opt/tivoli/tsm/client/ba/bin/libxerces-c1_6_0.so"
>type=AVC msg=audit(1181323207.330:121): avc:  denied  { read } for  pid=12598 comm="ldconfig" name="libxerces-c1_6_0.so" dev=sda8 ino=1507426 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1181323207.330:121): arch=40000003 syscall=5 success=yes exit=4 a0=bfdf8550 a1=0 a2=1b6 a3=8 items=0 ppid=3216 pid=12598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1181323316.330:122): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181323316.830:123): user pid=3213 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1181323345.830:124): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181323345.830:125): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181323345.830:126): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181323345.830:127): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181323352.830:128): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181323352.830:129): user pid=12646 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181323371.330:130): user pid=2790 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181323371.330:131): user pid=2790 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181323379.226:5845) auditd normal halt, sending auid=4294967295 pid=13201 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2057
>type=DAEMON_START msg=audit(1181555499.531:3402) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2070 res=success, auditd pid=2070
>type=CONFIG_CHANGE msg=audit(1181555499.371:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181555499.371:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181555499.371:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181555499.371:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181555522.870:9): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181555534.870:10): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181555534.870:11): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181555534.870:12): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181555534.870:13): login pid=2785 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181555534.870:14): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181555534.870:15): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181555589.869:16): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181555589.869:17): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181555590.369:18): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181555590.369:19): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1181555652.869:20): avc:  denied  { search } for  pid=3387 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555652.869:20): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8ad30 a1=bfb8bd8c a2=a000 a3=9df7a10 items=0 ppid=3386 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555654.869:21): avc:  denied  { search } for  pid=3387 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555654.869:21): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8ad30 a1=bfb8bd8c a2=a000 a3=9df7a10 items=0 ppid=3386 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555655.869:22): avc:  denied  { search } for  pid=3387 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555655.869:22): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8ad30 a1=bfb8bd8c a2=a000 a3=9df7a10 items=0 ppid=3386 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555663.369:23): avc:  denied  { search } for  pid=3434 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555663.369:23): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d4980 a1=bf9d59dc a2=a000 a3=9924a10 items=0 ppid=3257 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555663.369:24): avc:  denied  { search } for  pid=3434 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555663.369:24): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d4980 a1=bf9d59dc a2=a000 a3=9924a10 items=0 ppid=3257 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555663.369:25): avc:  denied  { search } for  pid=3434 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555663.369:25): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d4980 a1=bf9d59dc a2=a000 a3=9924a10 items=0 ppid=3257 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555664.869:26): avc:  denied  { search } for  pid=3435 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555664.869:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfe92640 a1=bfe9369c a2=a000 a3=917aa10 items=0 ppid=3257 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555664.869:27): avc:  denied  { search } for  pid=3435 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555664.869:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfe92640 a1=bfe9369c a2=a000 a3=917aa10 items=0 ppid=3257 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555664.869:28): avc:  denied  { search } for  pid=3435 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555664.869:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfe92640 a1=bfe9369c a2=a000 a3=917aa10 items=0 ppid=3257 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555703.368:29): avc:  denied  { search } for  pid=3479 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555703.368:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfe405b0 a1=bfe4160c a2=a000 a3=9cf1a10 items=0 ppid=3448 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555703.368:30): avc:  denied  { search } for  pid=3479 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555703.368:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfe405b0 a1=bfe4160c a2=a000 a3=9cf1a10 items=0 ppid=3448 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555703.368:31): avc:  denied  { search } for  pid=3479 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555703.368:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfe405b0 a1=bfe4160c a2=a000 a3=9cf1a10 items=0 ppid=3448 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555707.868:32): avc:  denied  { search } for  pid=3480 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555707.868:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9a250 a1=bfa9b2ac a2=a000 a3=928ba10 items=0 ppid=3257 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555707.868:33): avc:  denied  { search } for  pid=3480 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555707.868:33): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9a250 a1=bfa9b2ac a2=a000 a3=928ba10 items=0 ppid=3257 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555707.868:34): avc:  denied  { search } for  pid=3480 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555707.868:34): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9a250 a1=bfa9b2ac a2=a000 a3=928ba10 items=0 ppid=3257 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1181555708.368:35): user pid=3482 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1181555712.368:36): avc:  denied  { search } for  pid=3485 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555712.368:36): arch=40000003 syscall=195 success=no exit=-13 a0=bfedde90 a1=bfedeeec a2=a000 a3=96b0a10 items=0 ppid=3483 pid=3485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555712.368:37): avc:  denied  { search } for  pid=3485 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555712.368:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfedde90 a1=bfedeeec a2=a000 a3=96b0a10 items=0 ppid=3483 pid=3485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555712.368:38): avc:  denied  { search } for  pid=3485 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555712.368:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfedde90 a1=bfedeeec a2=a000 a3=96b0a10 items=0 ppid=3483 pid=3485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555727.868:39): avc:  denied  { search } for  pid=3504 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555727.868:39): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5e510 a1=bfd5f56c a2=a000 a3=945ea10 items=0 ppid=3503 pid=3504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555727.868:40): avc:  denied  { search } for  pid=3504 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555727.868:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5e510 a1=bfd5f56c a2=a000 a3=945ea10 items=0 ppid=3503 pid=3504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555727.868:41): avc:  denied  { search } for  pid=3504 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555727.868:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5e510 a1=bfd5f56c a2=a000 a3=945ea10 items=0 ppid=3503 pid=3504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555744.868:42): avc:  denied  { search } for  pid=4039 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555744.868:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfd94d40 a1=bfd95d9c a2=a000 a3=a0ada10 items=0 ppid=3257 pid=4039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555744.868:43): avc:  denied  { search } for  pid=4039 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555744.868:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfd94d40 a1=bfd95d9c a2=a000 a3=a0ada10 items=0 ppid=3257 pid=4039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555744.868:44): avc:  denied  { search } for  pid=4039 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555744.868:44): arch=40000003 syscall=195 success=no exit=-13 a0=bfd94d40 a1=bfd95d9c a2=a000 a3=a0ada10 items=0 ppid=3257 pid=4039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555754.868:45): avc:  denied  { search } for  pid=4045 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555754.868:45): arch=40000003 syscall=195 success=no exit=-13 a0=bf980930 a1=bf98198c a2=a000 a3=867fa10 items=0 ppid=4044 pid=4045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555754.868:46): avc:  denied  { search } for  pid=4045 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555754.868:46): arch=40000003 syscall=195 success=no exit=-13 a0=bf980930 a1=bf98198c a2=a000 a3=867fa10 items=0 ppid=4044 pid=4045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555754.868:47): avc:  denied  { search } for  pid=4045 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555754.868:47): arch=40000003 syscall=195 success=no exit=-13 a0=bf980930 a1=bf98198c a2=a000 a3=867fa10 items=0 ppid=4044 pid=4045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555765.726:48): avc:  denied  { search } for  pid=4057 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555765.726:48): arch=40000003 syscall=195 success=no exit=-13 a0=bfb6d320 a1=bfb6e37c a2=a000 a3=9ae8a10 items=0 ppid=4056 pid=4057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555765.726:49): avc:  denied  { search } for  pid=4057 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555765.726:49): arch=40000003 syscall=195 success=no exit=-13 a0=bfb6d320 a1=bfb6e37c a2=a000 a3=9ae8a10 items=0 ppid=4056 pid=4057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555765.726:50): avc:  denied  { search } for  pid=4057 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555765.726:50): arch=40000003 syscall=195 success=no exit=-13 a0=bfb6d320 a1=bfb6e37c a2=a000 a3=9ae8a10 items=0 ppid=4056 pid=4057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555775.226:51): avc:  denied  { search } for  pid=4061 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555775.226:51): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f58b0 a1=bf8f690c a2=a000 a3=8ff2a10 items=0 ppid=3257 pid=4061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555775.226:52): avc:  denied  { search } for  pid=4061 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555775.226:52): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f58b0 a1=bf8f690c a2=a000 a3=8ff2a10 items=0 ppid=3257 pid=4061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555775.726:53): avc:  denied  { search } for  pid=4061 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555775.726:53): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f58b0 a1=bf8f690c a2=a000 a3=8ff2a10 items=0 ppid=3257 pid=4061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555788.226:54): avc:  denied  { search } for  pid=4072 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555788.226:54): arch=40000003 syscall=195 success=no exit=-13 a0=bff34ef0 a1=bff35f4c a2=a000 a3=8408a10 items=0 ppid=4071 pid=4072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555788.226:55): avc:  denied  { search } for  pid=4072 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555788.226:55): arch=40000003 syscall=195 success=no exit=-13 a0=bff34ef0 a1=bff35f4c a2=a000 a3=8408a10 items=0 ppid=4071 pid=4072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555788.226:56): avc:  denied  { search } for  pid=4072 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555788.226:56): arch=40000003 syscall=195 success=no exit=-13 a0=bff34ef0 a1=bff35f4c a2=a000 a3=8408a10 items=0 ppid=4071 pid=4072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555827.726:57): avc:  denied  { search } for  pid=4117 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555827.726:57): arch=40000003 syscall=195 success=no exit=-13 a0=bfa63a20 a1=bfa64a7c a2=a000 a3=84a0a10 items=0 ppid=4116 pid=4117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555827.726:58): avc:  denied  { search } for  pid=4117 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555827.726:58): arch=40000003 syscall=195 success=no exit=-13 a0=bfa63a20 a1=bfa64a7c a2=a000 a3=84a0a10 items=0 ppid=4116 pid=4117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555827.726:59): avc:  denied  { search } for  pid=4117 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555827.726:59): arch=40000003 syscall=195 success=no exit=-13 a0=bfa63a20 a1=bfa64a7c a2=a000 a3=84a0a10 items=0 ppid=4116 pid=4117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1181555828.226:60): user pid=4119 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1181555828.226:61): user pid=4120 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1181555832.725:62): avc:  denied  { search } for  pid=4126 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555832.725:62): arch=40000003 syscall=195 success=no exit=-13 a0=bfb03ac0 a1=bfb04b1c a2=a000 a3=8d9aa10 items=0 ppid=4125 pid=4126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555832.725:63): avc:  denied  { search } for  pid=4126 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555832.725:63): arch=40000003 syscall=195 success=no exit=-13 a0=bfb03ac0 a1=bfb04b1c a2=a000 a3=8d9aa10 items=0 ppid=4125 pid=4126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555832.725:64): avc:  denied  { search } for  pid=4126 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555832.725:64): arch=40000003 syscall=195 success=no exit=-13 a0=bfb03ac0 a1=bfb04b1c a2=a000 a3=8d9aa10 items=0 ppid=4125 pid=4126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555874.225:65): avc:  denied  { search } for  pid=4338 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555874.225:65): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd2480 a1=bfcd34dc a2=a000 a3=84fba10 items=0 ppid=4337 pid=4338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555874.225:66): avc:  denied  { search } for  pid=4338 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555874.225:66): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd2480 a1=bfcd34dc a2=a000 a3=84fba10 items=0 ppid=4337 pid=4338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555874.225:67): avc:  denied  { search } for  pid=4338 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555874.225:67): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd2480 a1=bfcd34dc a2=a000 a3=84fba10 items=0 ppid=4337 pid=4338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555876.725:68): avc:  denied  { search } for  pid=4340 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555876.725:68): arch=40000003 syscall=195 success=no exit=-13 a0=bfda1d50 a1=bfda2dac a2=a000 a3=91d3a10 items=0 ppid=3257 pid=4340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555876.725:69): avc:  denied  { search } for  pid=4340 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555876.725:69): arch=40000003 syscall=195 success=no exit=-13 a0=bfda1d50 a1=bfda2dac a2=a000 a3=91d3a10 items=0 ppid=3257 pid=4340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555876.725:70): avc:  denied  { search } for  pid=4340 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555876.725:70): arch=40000003 syscall=195 success=no exit=-13 a0=bfda1d50 a1=bfda2dac a2=a000 a3=91d3a10 items=0 ppid=3257 pid=4340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555878.225:71): avc:  denied  { search } for  pid=4346 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555878.225:71): arch=40000003 syscall=195 success=no exit=-13 a0=bf8bb070 a1=bf8bc0cc a2=a000 a3=94a8a10 items=0 ppid=3257 pid=4346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555878.225:72): avc:  denied  { search } for  pid=4346 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555878.225:72): arch=40000003 syscall=195 success=no exit=-13 a0=bf8bb070 a1=bf8bc0cc a2=a000 a3=94a8a10 items=0 ppid=3257 pid=4346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555878.225:73): avc:  denied  { search } for  pid=4346 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555878.225:73): arch=40000003 syscall=195 success=no exit=-13 a0=bf8bb070 a1=bf8bc0cc a2=a000 a3=94a8a10 items=0 ppid=3257 pid=4346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555880.725:74): avc:  denied  { search } for  pid=4348 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555880.725:74): arch=40000003 syscall=195 success=no exit=-13 a0=bf967120 a1=bf96817c a2=a000 a3=8741a10 items=0 ppid=4347 pid=4348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555880.725:75): avc:  denied  { search } for  pid=4348 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555880.725:75): arch=40000003 syscall=195 success=no exit=-13 a0=bf967120 a1=bf96817c a2=a000 a3=8741a10 items=0 ppid=4347 pid=4348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555880.725:76): avc:  denied  { search } for  pid=4348 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555880.725:76): arch=40000003 syscall=195 success=no exit=-13 a0=bf967120 a1=bf96817c a2=a000 a3=8741a10 items=0 ppid=4347 pid=4348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555881.225:77): avc:  denied  { search } for  pid=4350 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555881.225:77): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2e2e0 a1=bfb2f33c a2=a000 a3=9c2ea10 items=0 ppid=4349 pid=4350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555881.225:78): avc:  denied  { search } for  pid=4350 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555881.225:78): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2e2e0 a1=bfb2f33c a2=a000 a3=9c2ea10 items=0 ppid=4349 pid=4350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555881.225:79): avc:  denied  { search } for  pid=4350 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555881.225:79): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2e2e0 a1=bfb2f33c a2=a000 a3=9c2ea10 items=0 ppid=4349 pid=4350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555883.725:80): avc:  denied  { search } for  pid=4359 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555883.725:80): arch=40000003 syscall=195 success=no exit=-13 a0=bf9240e0 a1=bf92513c a2=a000 a3=89fea10 items=0 ppid=4358 pid=4359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555883.725:81): avc:  denied  { search } for  pid=4359 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555883.725:81): arch=40000003 syscall=195 success=no exit=-13 a0=bf9240e0 a1=bf92513c a2=a000 a3=89fea10 items=0 ppid=4358 pid=4359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555883.725:82): avc:  denied  { search } for  pid=4359 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555883.725:82): arch=40000003 syscall=195 success=no exit=-13 a0=bf9240e0 a1=bf92513c a2=a000 a3=89fea10 items=0 ppid=4358 pid=4359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555886.225:83): avc:  denied  { search } for  pid=4368 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555886.225:83): arch=40000003 syscall=195 success=no exit=-13 a0=bfd38cf0 a1=bfd39d4c a2=a000 a3=9736a10 items=0 ppid=4367 pid=4368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555886.725:84): avc:  denied  { search } for  pid=4368 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555886.725:84): arch=40000003 syscall=195 success=no exit=-13 a0=bfd38cf0 a1=bfd39d4c a2=a000 a3=9736a10 items=0 ppid=4367 pid=4368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555886.725:85): avc:  denied  { search } for  pid=4368 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555886.725:85): arch=40000003 syscall=195 success=no exit=-13 a0=bfd38cf0 a1=bfd39d4c a2=a000 a3=9736a10 items=0 ppid=4367 pid=4368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555891.725:86): avc:  denied  { search } for  pid=4380 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555891.725:86): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=9002a10 items=0 ppid=3257 pid=4380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555891.725:87): avc:  denied  { search } for  pid=4380 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555891.725:87): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=9002a10 items=0 ppid=3257 pid=4380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555891.725:88): avc:  denied  { search } for  pid=4380 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555891.725:88): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=9002a10 items=0 ppid=3257 pid=4380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555892.725:89): avc:  denied  { search } for  pid=4383 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555892.725:89): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=889ea10 items=0 ppid=4382 pid=4383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555892.725:90): avc:  denied  { search } for  pid=4383 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555892.725:90): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=889ea10 items=0 ppid=4382 pid=4383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555892.725:91): avc:  denied  { search } for  pid=4383 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555892.725:91): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=889ea10 items=0 ppid=4382 pid=4383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555897.725:92): avc:  denied  { search } for  pid=4392 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555897.725:92): arch=40000003 syscall=195 success=no exit=-13 a0=bf96b120 a1=bf96c17c a2=a000 a3=847fa10 items=0 ppid=3257 pid=4392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555897.725:93): avc:  denied  { search } for  pid=4392 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555897.725:93): arch=40000003 syscall=195 success=no exit=-13 a0=bf96b120 a1=bf96c17c a2=a000 a3=847fa10 items=0 ppid=3257 pid=4392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555897.725:94): avc:  denied  { search } for  pid=4392 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555897.725:94): arch=40000003 syscall=195 success=no exit=-13 a0=bf96b120 a1=bf96c17c a2=a000 a3=847fa10 items=0 ppid=3257 pid=4392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555898.725:95): avc:  denied  { search } for  pid=4395 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555898.725:95): arch=40000003 syscall=195 success=no exit=-13 a0=bfc5fc10 a1=bfc60c6c a2=a000 a3=88b9a10 items=0 ppid=4394 pid=4395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555898.725:96): avc:  denied  { search } for  pid=4395 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555898.725:96): arch=40000003 syscall=195 success=no exit=-13 a0=bfc5fc10 a1=bfc60c6c a2=a000 a3=88b9a10 items=0 ppid=4394 pid=4395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555898.725:97): avc:  denied  { search } for  pid=4395 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555898.725:97): arch=40000003 syscall=195 success=no exit=-13 a0=bfc5fc10 a1=bfc60c6c a2=a000 a3=88b9a10 items=0 ppid=4394 pid=4395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555901.225:98): avc:  denied  { search } for  pid=4397 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555901.225:98): arch=40000003 syscall=195 success=no exit=-13 a0=bfeb6670 a1=bfeb76cc a2=a000 a3=8439a10 items=0 ppid=4396 pid=4397 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555901.225:99): avc:  denied  { search } for  pid=4397 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555901.225:99): arch=40000003 syscall=195 success=no exit=-13 a0=bfeb6670 a1=bfeb76cc a2=a000 a3=8439a10 items=0 ppid=4396 pid=4397 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181555901.225:100): avc:  denied  { search } for  pid=4397 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181555901.225:100): arch=40000003 syscall=195 success=no exit=-13 a0=bfeb6670 a1=bfeb76cc a2=a000 a3=8439a10 items=0 ppid=4396 pid=4397 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181556061.224:101): user pid=4401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181556061.224:102): user pid=4401 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181556061.224:103): login pid=4401 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181556061.224:104): user pid=4401 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181556061.224:105): user pid=4401 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181556061.224:106): user pid=4401 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181556327.722:107): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181556327.722:108): user pid=3224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181557176.218:109): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181557176.218:110): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ERR msg=audit(1181557178.218:111): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1181557186.718:112): user pid=4496 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181557186.718:113): user pid=4496 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181557186.718:114): user pid=4496 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181557186.718:115): login pid=4496 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181557186.718:116): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181557186.718:117): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181558100.713:118): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181558100.713:119): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181558100.713:120): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181558100.713:121): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1181558127.713:122): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181558127.713:123): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1181558127.713:124): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1181558127.713:125): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1181558342.712:126): avc:  denied  { search } for  pid=6617 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558342.712:126): arch=40000003 syscall=195 success=no exit=-13 a0=bfff77b0 a1=bfff880c a2=a000 a3=9b0ca10 items=0 ppid=6485 pid=6617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558342.712:127): avc:  denied  { search } for  pid=6617 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558342.712:127): arch=40000003 syscall=195 success=no exit=-13 a0=bfff77b0 a1=bfff880c a2=a000 a3=9b0ca10 items=0 ppid=6485 pid=6617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558342.712:128): avc:  denied  { search } for  pid=6617 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558342.712:128): arch=40000003 syscall=195 success=no exit=-13 a0=bfff77b0 a1=bfff880c a2=a000 a3=9b0ca10 items=0 ppid=6485 pid=6617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558343.712:129): avc:  denied  { search } for  pid=6619 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558343.712:129): arch=40000003 syscall=195 success=no exit=-13 a0=bfd114c0 a1=bfd1251c a2=a000 a3=a0cba10 items=0 ppid=6618 pid=6619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558343.712:130): avc:  denied  { search } for  pid=6619 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558343.712:130): arch=40000003 syscall=195 success=no exit=-13 a0=bfd114c0 a1=bfd1251c a2=a000 a3=a0cba10 items=0 ppid=6618 pid=6619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558343.712:131): avc:  denied  { search } for  pid=6619 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558343.712:131): arch=40000003 syscall=195 success=no exit=-13 a0=bfd114c0 a1=bfd1251c a2=a000 a3=a0cba10 items=0 ppid=6618 pid=6619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558370.712:132): avc:  denied  { search } for  pid=6630 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558370.712:132): arch=40000003 syscall=195 success=no exit=-13 a0=bfe435a0 a1=bfe445fc a2=a000 a3=9354a10 items=0 ppid=5153 pid=6630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558370.712:133): avc:  denied  { search } for  pid=6630 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558370.712:133): arch=40000003 syscall=195 success=no exit=-13 a0=bfe435a0 a1=bfe445fc a2=a000 a3=9354a10 items=0 ppid=5153 pid=6630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181558370.712:134): avc:  denied  { search } for  pid=6630 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181558370.712:134): arch=40000003 syscall=195 success=no exit=-13 a0=bfe435a0 a1=bfe445fc a2=a000 a3=9354a10 items=0 ppid=5153 pid=6630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181558389.212:135): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1181558389.212:135): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf803224 a2=1 a3=bf803224 items=0 ppid=5153 pid=6631 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1181558389.212:136): user pid=2142 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1181558391.712:137): avc:  denied  { search } for  pid=6632 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=AVC msg=audit(1181558391.712:137): avc:  denied  { getattr } for  pid=6632 comm="ldconfig" name="libxerces-c1_6_0.so" dev=sda8 ino=1507426 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1181558391.712:137): arch=40000003 syscall=195 success=yes exit=0 a0=bf9930f0 a1=bf99414c a2=a000 a3=8ddca10 items=0 ppid=5153 pid=6632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181558391.712:137):  path="/opt/tivoli/tsm/client/ba/bin/libxerces-c1_6_0.so"
>type=AVC msg=audit(1181558391.712:138): avc:  denied  { read } for  pid=6632 comm="ldconfig" name="libxerces-c1_6_0.so" dev=sda8 ino=1507426 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1181558391.712:138): arch=40000003 syscall=5 success=yes exit=4 a0=bf9930f0 a1=0 a2=1b6 a3=8 items=0 ppid=5153 pid=6632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1181558394.212:139): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1181558394.212:140): user pid=2142 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1181558394.212:139): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf848274 a2=1 a3=bf848274 items=0 ppid=5153 pid=6633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=CRED_DISP msg=audit(1181558704.211:141): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1181558704.211:142): user pid=5150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1181558706.211:143): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181558706.211:144): user pid=5086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181558713.211:145): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181558713.211:146): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181558723.211:147): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181558723.211:148): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181558723.211:149): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181558723.211:150): login pid=4496 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1181558723.211:151): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181558723.211:152): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181559661.707:153): user pid=7701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181559661.707:154): user pid=7701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181559661.707:155): login pid=7701 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181559661.707:156): user pid=7701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181559661.707:157): user pid=7701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181559661.707:158): user pid=7701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1181561047.201:159): user pid=7900 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181562058.698:160): user pid=8037 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181562955.193:161): user pid=8666 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1181563959.718:162): user pid=8764 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1181564469.492:163): avc:  denied  { append } for  pid=9420 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181564469.492:163): arch=40000003 syscall=5 success=no exit=-13 a0=81780158 a1=c01 a2=0 a3=0 items=0 ppid=2305 pid=9420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC msg=audit(1181564469.992:164): avc:  denied  { append } for  pid=9420 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181564469.992:164): arch=40000003 syscall=5 success=no exit=-13 a0=8177d2d8 a1=c01 a2=0 a3=0 items=0 ppid=2305 pid=9420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181566860.985:165): user pid=10856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181566860.985:166): user pid=10856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181566860.985:167): login pid=10856 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181566860.985:168): user pid=10856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181566860.985:169): user pid=10856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181566860.985:170): user pid=10856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181569372.472:171): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181569372.472:172): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181569372.472:173): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181569372.472:174): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1181569395.972:175): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181569395.972:176): user pid=11064 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181570460.967:177): user pid=11261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181570460.967:178): user pid=11261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181570460.967:179): login pid=11261 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181570460.967:180): user pid=11261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181570460.967:181): user pid=11261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181570460.967:182): user pid=11261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181574060.948:183): user pid=11464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181574060.948:184): user pid=11464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181574060.948:185): login pid=11464 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181574060.948:186): user pid=11464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181574061.448:187): user pid=11464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181574061.448:188): user pid=11464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181575314.941:189): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1181575314.941:190): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1181575314.941:191): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1181575314.941:192): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_DISP msg=audit(1181575327.941:193): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1181575327.941:194): user pid=11608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_AUTH msg=audit(1181577564.431:195): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1181577564.431:196): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1181577564.431:197): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1181577564.431:198): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=AVC msg=audit(1181577568.431:199): avc:  denied  { search } for  pid=11936 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181577568.431:199): arch=40000003 syscall=195 success=no exit=-13 a0=bfeee640 a1=bfeef69c a2=a000 a3=9baba10 items=0 ppid=11906 pid=11936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181577568.431:200): avc:  denied  { search } for  pid=11936 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181577568.431:200): arch=40000003 syscall=195 success=no exit=-13 a0=bfeee640 a1=bfeef69c a2=a000 a3=9baba10 items=0 ppid=11906 pid=11936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181577568.431:201): avc:  denied  { search } for  pid=11936 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181577568.431:201): arch=40000003 syscall=195 success=no exit=-13 a0=bfeee640 a1=bfeef69c a2=a000 a3=9baba10 items=0 ppid=11906 pid=11936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181577661.431:202): user pid=11963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181577661.431:203): user pid=11963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181577661.431:204): login pid=11963 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181577661.431:205): user pid=11963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181577661.431:206): user pid=11963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181577661.431:207): user pid=11963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181581261.412:208): user pid=12316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181581261.412:209): user pid=12316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181581261.412:210): login pid=12316 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181581261.412:211): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181581261.412:212): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181581261.412:213): user pid=12316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181584444.395:214): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181584444.395:215): user pid=11903 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1181584455.395:216): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181584455.395:217): user pid=4496 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181584462.871:3403) auditd normal halt, sending auid=4294967295 pid=12970 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2070
>type=DAEMON_START msg=audit(1181630882.646:5654) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2055 res=success, auditd pid=2055
>type=CONFIG_CHANGE msg=audit(1181630882.434:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181630882.434:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181630882.434:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181630882.434:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181630906.932:9): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1181631661.276:10): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181631661.276:11): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181631661.276:12): login pid=2802 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181631661.276:13): user pid=2802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181631661.276:14): user pid=2802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181631661.276:15): user pid=2802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181632331.774:16): user pid=2767 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181632331.774:17): user pid=2767 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181632331.774:18): user pid=2767 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181632331.774:19): login pid=2767 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181632331.774:20): user pid=2767 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181632331.774:21): user pid=2767 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181632429.273:22): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181632429.273:23): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181632429.273:24): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181632429.273:25): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1181632463.773:26): avc:  denied  { search } for  pid=3375 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632463.773:26): arch=40000003 syscall=195 success=no exit=-13 a0=bff2dc80 a1=bff2ecdc a2=a000 a3=a0c2a10 items=0 ppid=3374 pid=3375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632464.773:27): avc:  denied  { search } for  pid=3375 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632464.773:27): arch=40000003 syscall=195 success=no exit=-13 a0=bff2dc80 a1=bff2ecdc a2=a000 a3=a0c2a10 items=0 ppid=3374 pid=3375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632464.773:28): avc:  denied  { search } for  pid=3375 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632464.773:28): arch=40000003 syscall=195 success=no exit=-13 a0=bff2dc80 a1=bff2ecdc a2=a000 a3=a0c2a10 items=0 ppid=3374 pid=3375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632466.273:29): avc:  denied  { search } for  pid=3376 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632466.273:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfc37900 a1=bfc3895c a2=a000 a3=97d5a10 items=0 ppid=3250 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632466.273:30): avc:  denied  { search } for  pid=3376 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632466.273:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfc37900 a1=bfc3895c a2=a000 a3=97d5a10 items=0 ppid=3250 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632466.273:31): avc:  denied  { search } for  pid=3376 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632466.273:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfc37900 a1=bfc3895c a2=a000 a3=97d5a10 items=0 ppid=3250 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632473.773:32): avc:  denied  { search } for  pid=3391 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632473.773:32): arch=40000003 syscall=195 success=no exit=-13 a0=bff45750 a1=bff467ac a2=a000 a3=8cbaa10 items=0 ppid=3250 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632473.773:33): avc:  denied  { search } for  pid=3391 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632473.773:33): arch=40000003 syscall=195 success=no exit=-13 a0=bff45750 a1=bff467ac a2=a000 a3=8cbaa10 items=0 ppid=3250 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632473.773:34): avc:  denied  { search } for  pid=3391 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632473.773:34): arch=40000003 syscall=195 success=no exit=-13 a0=bff45750 a1=bff467ac a2=a000 a3=8cbaa10 items=0 ppid=3250 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632476.273:35): avc:  denied  { search } for  pid=3395 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632476.273:35): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b0960 a1=bf9b19bc a2=a000 a3=96eea10 items=0 ppid=3394 pid=3395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632476.273:36): avc:  denied  { search } for  pid=3395 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632476.273:36): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b0960 a1=bf9b19bc a2=a000 a3=96eea10 items=0 ppid=3394 pid=3395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632476.273:37): avc:  denied  { search } for  pid=3395 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632476.273:37): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b0960 a1=bf9b19bc a2=a000 a3=96eea10 items=0 ppid=3394 pid=3395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632537.773:38): avc:  denied  { write } for  pid=3437 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181632537.773:38): arch=40000003 syscall=11 success=yes exit=0 a0=bfad7954 a1=bfad8a08 a2=bfad8a10 a3=0 items=0 ppid=3436 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181632537.773:38):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181632538.273:39): avc:  denied  { search } for  pid=3437 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632538.273:39): arch=40000003 syscall=195 success=no exit=-13 a0=bff766d0 a1=bff7772c a2=a000 a3=9ddda10 items=0 ppid=3436 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632538.273:40): avc:  denied  { search } for  pid=3437 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632538.273:40): arch=40000003 syscall=195 success=no exit=-13 a0=bff766d0 a1=bff7772c a2=a000 a3=9ddda10 items=0 ppid=3436 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632538.273:41): avc:  denied  { search } for  pid=3437 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632538.273:41): arch=40000003 syscall=195 success=no exit=-13 a0=bff766d0 a1=bff7772c a2=a000 a3=9ddda10 items=0 ppid=3436 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1181632790.772:42): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181632790.772:43): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181632790.772:44): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181632790.772:45): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1181632909.771:46): avc:  denied  { write } for  pid=3527 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181632909.771:46): arch=40000003 syscall=11 success=yes exit=0 a0=bfc1aa54 a1=bfc1bb08 a2=bfc1bb10 a3=0 items=0 ppid=3526 pid=3527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181632909.771:46):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181632909.771:47): avc:  denied  { search } for  pid=3527 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632909.771:47): arch=40000003 syscall=195 success=no exit=-13 a0=bfcad400 a1=bfcae45c a2=a000 a3=844aa10 items=0 ppid=3526 pid=3527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632909.771:48): avc:  denied  { search } for  pid=3527 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632909.771:48): arch=40000003 syscall=195 success=no exit=-13 a0=bfcad400 a1=bfcae45c a2=a000 a3=844aa10 items=0 ppid=3526 pid=3527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181632909.771:49): avc:  denied  { search } for  pid=3527 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181632909.771:49): arch=40000003 syscall=195 success=no exit=-13 a0=bfcad400 a1=bfcae45c a2=a000 a3=844aa10 items=0 ppid=3526 pid=3527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633068.271:50): avc:  denied  { write } for  pid=3535 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181633068.271:50): arch=40000003 syscall=11 success=yes exit=0 a0=bfebf134 a1=bfec01e8 a2=bfec01f0 a3=0 items=0 ppid=3534 pid=3535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181633068.271:50):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181633068.271:51): avc:  denied  { search } for  pid=3535 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633068.271:51): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fc050 a1=bf8fd0ac a2=a000 a3=8755a10 items=0 ppid=3534 pid=3535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633068.771:52): avc:  denied  { search } for  pid=3535 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633068.771:52): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fc050 a1=bf8fd0ac a2=a000 a3=8755a10 items=0 ppid=3534 pid=3535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633068.771:53): avc:  denied  { search } for  pid=3535 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633068.771:53): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fc050 a1=bf8fd0ac a2=a000 a3=8755a10 items=0 ppid=3534 pid=3535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633166.770:54): avc:  denied  { write } for  pid=3546 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181633166.770:54): arch=40000003 syscall=11 success=yes exit=0 a0=bf93fbb4 a1=bf940c68 a2=bf940c70 a3=0 items=0 ppid=3545 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181633166.770:54):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181633166.770:55): avc:  denied  { search } for  pid=3546 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633166.770:55): arch=40000003 syscall=195 success=no exit=-13 a0=bfba5b00 a1=bfba6b5c a2=a000 a3=832ea10 items=0 ppid=3545 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633166.770:56): avc:  denied  { search } for  pid=3546 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633166.770:56): arch=40000003 syscall=195 success=no exit=-13 a0=bfba5b00 a1=bfba6b5c a2=a000 a3=832ea10 items=0 ppid=3545 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633166.770:57): avc:  denied  { search } for  pid=3546 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633166.770:57): arch=40000003 syscall=195 success=no exit=-13 a0=bfba5b00 a1=bfba6b5c a2=a000 a3=832ea10 items=0 ppid=3545 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633241.770:58): avc:  denied  { write } for  pid=3552 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181633241.770:58): arch=40000003 syscall=11 success=yes exit=0 a0=bfe358a4 a1=bfe36958 a2=bfe36960 a3=0 items=0 ppid=3551 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181633241.770:58):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181633242.270:59): avc:  denied  { search } for  pid=3552 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633242.270:59): arch=40000003 syscall=195 success=no exit=-13 a0=bfb0c830 a1=bfb0d88c a2=a000 a3=8a6fa10 items=0 ppid=3551 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633242.270:60): avc:  denied  { search } for  pid=3552 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633242.270:60): arch=40000003 syscall=195 success=no exit=-13 a0=bfb0c830 a1=bfb0d88c a2=a000 a3=8a6fa10 items=0 ppid=3551 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181633242.270:61): avc:  denied  { search } for  pid=3552 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181633242.270:61): arch=40000003 syscall=195 success=no exit=-13 a0=bfb0c830 a1=bfb0d88c a2=a000 a3=8a6fa10 items=0 ppid=3551 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181635261.761:62): user pid=3778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181635261.761:63): user pid=3778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181635261.761:64): login pid=3778 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181635261.761:65): user pid=3778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181635261.761:66): user pid=3778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181635261.761:67): user pid=3778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1181637860.750:68): avc:  denied  { append } for  pid=4180 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181637860.750:68): arch=40000003 syscall=5 success=no exit=-13 a0=80e2f150 a1=c01 a2=0 a3=0 items=0 ppid=2290 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC msg=audit(1181637860.750:69): avc:  denied  { append } for  pid=4180 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181637860.750:69): arch=40000003 syscall=5 success=no exit=-13 a0=80e2c2d0 a1=c01 a2=0 a3=0 items=0 ppid=2290 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181638861.746:70): user pid=5036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181638861.746:71): user pid=5036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181638861.746:72): login pid=5036 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181638861.746:73): user pid=5036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181638861.746:74): user pid=5036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181638861.746:75): user pid=5036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181640991.737:76): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181640991.737:77): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1181640991.737:78): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1181640991.737:79): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1181642460.730:80): user pid=5363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181642460.730:81): user pid=5363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181642460.730:82): login pid=5363 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181642460.730:83): user pid=5363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181642460.730:84): user pid=5363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181642460.730:85): user pid=5363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181644699.720:86): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1181644699.720:87): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1181644699.720:88): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1181644699.720:89): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_DISP msg=audit(1181644716.220:90): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1181644716.220:91): user pid=5449 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=AVC msg=audit(1181644734.720:92): avc:  denied  { write } for  pid=5487 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181644734.720:92): arch=40000003 syscall=11 success=yes exit=0 a0=bf9473b4 a1=bf948468 a2=bf948470 a3=0 items=0 ppid=5486 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181644734.720:92):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181644734.720:93): avc:  denied  { search } for  pid=5487 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644734.720:93): arch=40000003 syscall=195 success=no exit=-13 a0=bf9878e0 a1=bf98893c a2=a000 a3=9ed8a10 items=0 ppid=5486 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181644734.720:94): avc:  denied  { search } for  pid=5487 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644734.720:94): arch=40000003 syscall=195 success=no exit=-13 a0=bf9878e0 a1=bf98893c a2=a000 a3=9ed8a10 items=0 ppid=5486 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181644735.220:95): avc:  denied  { search } for  pid=5487 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644735.220:95): arch=40000003 syscall=195 success=no exit=-13 a0=bf9878e0 a1=bf98893c a2=a000 a3=9ed8a10 items=0 ppid=5486 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181644775.220:96): avc:  denied  { write } for  pid=5491 comm="ldconfig" name="ldconfig.out" dev=sda8 ino=2195483 scontext=user_u:system_r:ldconfig_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1181644775.220:96): arch=40000003 syscall=11 success=yes exit=0 a0=bf957bc4 a1=bf958c78 a2=bf958c80 a3=0 items=0 ppid=5490 pid=5491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1181644775.220:96):  path="/root/ldconfig.out"
>type=AVC msg=audit(1181644775.220:97): avc:  denied  { search } for  pid=5491 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644775.220:97): arch=40000003 syscall=195 success=no exit=-13 a0=bff29680 a1=bff2a6dc a2=a000 a3=8f9fa10 items=0 ppid=5490 pid=5491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181644775.720:98): avc:  denied  { search } for  pid=5491 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644775.720:98): arch=40000003 syscall=195 success=no exit=-13 a0=bff29680 a1=bff2a6dc a2=a000 a3=8f9fa10 items=0 ppid=5490 pid=5491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1181644775.720:99): avc:  denied  { search } for  pid=5491 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1181644775.720:99): arch=40000003 syscall=195 success=no exit=-13 a0=bff29680 a1=bff2a6dc a2=a000 a3=8f9fa10 items=0 ppid=5490 pid=5491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1181644930.719:100): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1181644930.719:101): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1181644930.719:102): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1181644930.719:103): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_DISP msg=audit(1181644941.219:104): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1181644941.219:105): user pid=5567 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1181646061.214:106): user pid=5881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181646061.214:107): user pid=5881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181646061.214:108): login pid=5881 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181646061.214:109): user pid=5881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181646061.214:110): user pid=5881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181646061.214:111): user pid=5881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181649661.198:112): user pid=6155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181649661.198:113): user pid=6155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181649661.198:114): login pid=6155 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181649661.198:115): user pid=6155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181649661.198:116): user pid=6155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181649661.198:117): user pid=6155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181653260.683:118): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181653260.683:119): user pid=6366 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181653260.683:120): login pid=6366 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181653260.683:121): user pid=6366 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181653260.683:122): user pid=6366 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181653260.683:123): user pid=6366 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181656861.166:124): user pid=6565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181656861.166:125): user pid=6565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181656861.166:126): login pid=6565 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181656861.166:127): user pid=6565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181656861.166:128): user pid=6565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181656861.166:129): user pid=6565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181660461.150:130): user pid=6818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181660461.150:131): user pid=6818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181660461.150:132): login pid=6818 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181660461.150:133): user pid=6818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181660461.150:134): user pid=6818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181660461.150:135): user pid=6818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181664060.634:136): user pid=7045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181664060.634:137): user pid=7045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181664060.634:138): login pid=7045 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181664060.634:139): user pid=7045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181664060.634:140): user pid=7045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181664060.634:141): user pid=7045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181667661.618:142): user pid=7278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181667661.618:143): user pid=7278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181667661.618:144): login pid=7278 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181667661.618:145): user pid=7278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181667661.618:146): user pid=7278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181667661.618:147): user pid=7278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181671261.101:148): user pid=7553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181671261.101:149): user pid=7553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181671261.101:150): login pid=7553 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181671261.101:151): user pid=7553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181671261.101:152): user pid=7553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181671261.101:153): user pid=7553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181671665.599:154): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181671665.599:155): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1181671669.099:156): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181671669.099:157): user pid=3480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181671990.098:158): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1181671990.098:159): user pid=5109 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1181672000.598:160): user pid=2767 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181672000.598:161): user pid=2767 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1181672009.210:5655) auditd normal halt, sending auid=4294967295 pid=8044 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2055
>type=DAEMON_START msg=audit(1181717297.568:6897) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2048 res=success, auditd pid=2048
>type=CONFIG_CHANGE msg=audit(1181717297.289:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181717297.289:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1181717297.289:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1181717297.289:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1181717321.287:9): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1181718062.144:10): user pid=2797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181718062.144:11): user pid=2797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181718062.144:12): login pid=2797 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181718062.144:13): user pid=2797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181718062.144:14): user pid=2797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181718062.144:15): user pid=2797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181718350.642:16): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1181718350.642:17): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1181718350.642:18): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1181718351.142:19): login pid=2764 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1181718351.142:20): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1181718351.142:21): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1181718389.142:22): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181718389.142:23): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1181718390.142:24): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1181718390.142:25): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1181721661.127:26): user pid=7340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181721661.127:27): user pid=7340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181721661.127:28): login pid=7340 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181721661.127:29): user pid=7340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181721661.127:30): user pid=7340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181721661.127:31): user pid=7340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1181723932.617:32): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1181723932.617:33): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1181723932.617:34): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1181723932.617:35): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1181723940.117:36): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1181723940.117:37): user pid=7504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1181724274.616:38): avc:  denied  { append } for  pid=7957 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181724274.616:38): arch=40000003 syscall=5 success=no exit=-13 a0=81b2e150 a1=c01 a2=0 a3=0 items=0 ppid=2285 pid=7957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC msg=audit(1181724274.616:39): avc:  denied  { append } for  pid=7957 comm="local" name="root" dev=sda8 ino=658434 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1181724274.616:39): arch=40000003 syscall=5 success=no exit=-13 a0=81b2b2d0 a1=c01 a2=0 a3=0 items=0 ppid=2285 pid=7957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=12 sgid=0 fsgid=12 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=USER_ACCT msg=audit(1181725261.111:40): user pid=8785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181725261.111:41): user pid=8785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181725261.111:42): login pid=8785 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181725261.111:43): user pid=8785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181725261.111:44): user pid=8785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181725261.111:45): user pid=8785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181728861.099:46): user pid=2385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181728861.099:47): user pid=2385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181728861.099:48): login pid=2385 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181728861.099:49): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181728861.099:50): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181728861.099:51): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181732461.584:52): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181732461.584:53): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181732461.584:54): login pid=2701 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181732461.584:55): user pid=2701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181732461.584:56): user pid=2701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181732461.584:57): user pid=2701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181736061.568:58): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181736061.568:59): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181736061.568:60): login pid=3050 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181736061.568:61): user pid=3050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181736061.568:62): user pid=3050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181736061.568:63): user pid=3050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181739661.551:64): user pid=3399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181739661.551:65): user pid=3399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181739661.551:66): login pid=3399 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181739661.551:67): user pid=3399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181739661.551:68): user pid=3399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181739661.551:69): user pid=3399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181743261.034:70): user pid=3641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181743261.034:71): user pid=3641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181743261.034:72): login pid=3641 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181743261.034:73): user pid=3641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181743261.034:74): user pid=3641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181743261.034:75): user pid=3641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181746861.016:76): user pid=4111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181746861.016:77): user pid=4111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181746861.016:78): login pid=4111 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181746861.016:79): user pid=4111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181746861.016:80): user pid=4111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181746861.016:81): user pid=4111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181750460.998:82): user pid=4399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181750460.998:83): user pid=4399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181750460.998:84): login pid=4399 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181750460.998:85): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181750460.998:86): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181750460.998:87): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1181754060.980:88): user pid=4711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1181754060.980:89): user pid=4711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1181754060.980:90): login pid=4711 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1181754060.980:91): user pid=4711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181754061.480:92): user pid=4711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1181754061.480:93): user pid=4711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1181754457.978:94): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181754457.978:95): user pid=3217 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1181756676.467:96): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1181756676.467:97): user pid=2764 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_START msg=audit(1182158350.580:6064) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2081 res=success, auditd pid=2081
>type=CONFIG_CHANGE msg=audit(1182158350.488:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182158350.488:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182158350.488:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182158350.488:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182158372.487:9): user pid=2708 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1182158388.987:10): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182158388.987:11): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182158388.987:12): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182158388.987:13): login pid=2793 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182158388.987:14): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182158388.987:15): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1182158462.986:16): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182158462.986:17): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1182158463.486:18): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1182158463.486:19): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1182158983.054:20): avc:  denied  { search } for  pid=3486 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158983.054:20): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2ffa0 a1=bfb30ffc a2=a000 a3=8a2ea10 items=0 ppid=3485 pid=3486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158983.554:21): avc:  denied  { search } for  pid=3486 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158983.554:21): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2ffa0 a1=bfb30ffc a2=a000 a3=8a2ea10 items=0 ppid=3485 pid=3486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158984.054:22): avc:  denied  { search } for  pid=3486 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158984.054:22): arch=40000003 syscall=195 success=no exit=-13 a0=bfb2ffa0 a1=bfb30ffc a2=a000 a3=8a2ea10 items=0 ppid=3485 pid=3486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158987.054:23): avc:  denied  { search } for  pid=3489 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158987.054:23): arch=40000003 syscall=195 success=no exit=-13 a0=bff78730 a1=bff7978c a2=a000 a3=92f9a10 items=0 ppid=3266 pid=3489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158987.054:24): avc:  denied  { search } for  pid=3489 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158987.054:24): arch=40000003 syscall=195 success=no exit=-13 a0=bff78730 a1=bff7978c a2=a000 a3=92f9a10 items=0 ppid=3266 pid=3489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158987.054:25): avc:  denied  { search } for  pid=3489 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158987.054:25): arch=40000003 syscall=195 success=no exit=-13 a0=bff78730 a1=bff7978c a2=a000 a3=92f9a10 items=0 ppid=3266 pid=3489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158989.054:26): avc:  denied  { search } for  pid=3491 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158989.054:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfb5d310 a1=bfb5e36c a2=a000 a3=85a1a10 items=0 ppid=3490 pid=3491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158989.054:27): avc:  denied  { search } for  pid=3491 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158989.054:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfb5d310 a1=bfb5e36c a2=a000 a3=85a1a10 items=0 ppid=3490 pid=3491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158989.054:28): avc:  denied  { search } for  pid=3491 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158989.054:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfb5d310 a1=bfb5e36c a2=a000 a3=85a1a10 items=0 ppid=3490 pid=3491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158994.054:29): avc:  denied  { search } for  pid=3496 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158994.054:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9da50 a1=bfa9eaac a2=a000 a3=8baba10 items=0 ppid=3495 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158994.054:30): avc:  denied  { search } for  pid=3496 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158994.054:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9da50 a1=bfa9eaac a2=a000 a3=8baba10 items=0 ppid=3495 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182158994.054:31): avc:  denied  { search } for  pid=3496 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182158994.054:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9da50 a1=bfa9eaac a2=a000 a3=8baba10 items=0 ppid=3495 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182159004.054:32): avc:  denied  { search } for  pid=3505 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159004.054:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfa4c200 a1=bfa4d25c a2=a000 a3=9659a10 items=0 ppid=3266 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182159004.054:33): avc:  denied  { search } for  pid=3505 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159004.054:33): arch=40000003 syscall=195 success=no exit=-13 a0=bfa4c200 a1=bfa4d25c a2=a000 a3=9659a10 items=0 ppid=3266 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182159004.054:34): avc:  denied  { search } for  pid=3505 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159004.054:34): arch=40000003 syscall=195 success=no exit=-13 a0=bfa4c200 a1=bfa4d25c a2=a000 a3=9659a10 items=0 ppid=3266 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1182159005.554:35): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1182159005.554:36): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1182159005.554:37): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1182159005.554:38): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=MAC_STATUS msg=audit(1182159009.554:39): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1182159009.554:39): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfc9c6c4 a2=1 a3=bfc9c6c4 items=0 ppid=3508 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1182159009.554:40): user pid=2153 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1182159009.554:41): avc:  denied  { search } for  pid=3539 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159009.554:41): arch=40000003 syscall=195 success=yes exit=0 a0=bfcdc490 a1=bfcdd4ec a2=a000 a3=9e57a10 items=0 ppid=3266 pid=3539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182159090.554:42): avc:  denied  { search } for  pid=4747 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159090.554:42): arch=40000003 syscall=195 success=yes exit=0 a0=bfc1c390 a1=bfc1d3ec a2=a000 a3=8670a10 items=0 ppid=4746 pid=4747 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1182159094.554:43): user pid=4762 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=postdrop exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1182159094.554:44): user pid=4763 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=postfix exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1182159094.554:45): user pid=4764 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=mail exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1182159094.554:46): user pid=4765 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=postfix exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_AVC msg=audit(1182159167.053:47): user pid=2153 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1182159167.053:48): policy loaded auid=500
>type=SYSCALL msg=audit(1182159167.053:48): arch=40000003 syscall=4 success=yes exit=1549439 a0=4 a1=b7da8000 a2=17a47f a3=bfe5f3c8 items=0 ppid=5289 pid=5290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=AVC msg=audit(1182159175.553:49): avc:  denied  { search } for  pid=5355 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159175.553:49): arch=40000003 syscall=195 success=yes exit=0 a0=bfa46a00 a1=bfa47a5c a2=a000 a3=9bdca10 items=0 ppid=5354 pid=5355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182159189.053:50): avc:  denied  { search } for  pid=5457 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182159189.053:50): arch=40000003 syscall=195 success=yes exit=0 a0=bf991940 a1=bf99299c a2=a000 a3=9c8aa10 items=0 ppid=3266 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1182160045.549:51): enforcing=1 old_enforcing=0 auid=500
>type=SYSCALL msg=audit(1182160045.549:51): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfed00f4 a2=1 a3=bfed00f4 items=0 ppid=3508 pid=5558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1182160045.549:52): user pid=2153 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=CRED_DISP msg=audit(1182160288.048:53): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1182160288.048:54): user pid=3503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1182160300.048:55): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1182160300.048:56): user pid=3233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182160861.546:57): user pid=5649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182160861.546:58): user pid=5649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182160861.546:59): login pid=5649 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182160861.546:60): user pid=5649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182160861.546:61): user pid=5649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182160861.546:62): user pid=5649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182161049.545:63): avc:  denied  { read } for  pid=5676 comm="smtp" name="[39223]" dev=eventpollfs ino=39223 scontext=user_u:system_r:postfix_smtp_t:s0 tcontext=user_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182161049.545:63): arch=40000003 syscall=11 success=yes exit=0 a0=81030a20 a1=81030ac0 a2=8102d1a8 a3=1 items=0 ppid=5431 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=user_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182161049.545:63):  path="eventpoll:[39223]"
>type=AVC msg=audit(1182162767.037:64): avc:  denied  { read } for  pid=5894 comm="smtp" name="[39223]" dev=eventpollfs ino=39223 scontext=user_u:system_r:postfix_smtp_t:s0 tcontext=user_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182162767.037:64): arch=40000003 syscall=11 success=yes exit=0 a0=81030a20 a1=81030ac0 a2=8102d1a8 a3=1 items=0 ppid=5431 pid=5894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=user_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182162767.037:64):  path="eventpoll:[39223]"
>type=USER_ACCT msg=audit(1182164461.030:65): user pid=5924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182164461.030:66): user pid=5924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182164461.030:67): login pid=5924 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182164461.030:68): user pid=5924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182164461.030:69): user pid=5924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182164461.030:70): user pid=5924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182167648.017:71): avc:  denied  { read } for  pid=8856 comm="smtp" name="[39223]" dev=eventpollfs ino=39223 scontext=user_u:system_r:postfix_smtp_t:s0 tcontext=user_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182167648.017:71): arch=40000003 syscall=11 success=yes exit=0 a0=81030a20 a1=81030ac0 a2=8102d1a8 a3=1 items=0 ppid=5431 pid=8856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=user_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182167648.017:71):  path="eventpoll:[39223]"
>type=USER_ACCT msg=audit(1182168061.015:72): user pid=8864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182168061.015:73): user pid=8864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182168061.015:74): login pid=8864 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182168061.015:75): user pid=8864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182168061.015:76): user pid=8864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182168061.015:77): user pid=8864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182170346.506:78): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1182170346.506:79): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1182170346.506:80): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1182170346.506:81): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_DISP msg=audit(1182170362.005:82): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1182170362.005:83): user pid=9278 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1182171661.500:84): user pid=9344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182171661.500:85): user pid=9344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182171661.500:86): login pid=9344 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182171661.500:87): user pid=9344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182171661.500:88): user pid=9344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182171661.500:89): user pid=9344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182174373.989:90): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182174373.989:91): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1182174387.488:92): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182174387.488:93): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182174387.488:94): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182174387.488:95): login pid=2793 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1182174387.488:96): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182174387.488:97): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182175261.485:98): user pid=10284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182175261.485:99): user pid=10284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182175261.485:100): login pid=10284 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182175261.485:101): user pid=10284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182175261.485:102): user pid=10284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182175261.485:103): user pid=10284 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182178861.469:104): user pid=10534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182178861.469:105): user pid=10534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182178861.469:106): login pid=10534 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182178861.469:107): user pid=10534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182178861.469:108): user pid=10534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182178861.469:109): user pid=10534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182179884.964:110): avc:  denied  { read } for  pid=10551 comm="smtp" name="[39223]" dev=eventpollfs ino=39223 scontext=user_u:system_r:postfix_smtp_t:s0 tcontext=user_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182179884.964:110): arch=40000003 syscall=11 success=yes exit=0 a0=81030a20 a1=81030ac0 a2=8102d1a8 a3=1 items=0 ppid=5431 pid=10551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=user_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182179884.964:110):  path="eventpoll:[39223]"
>type=USER_ACCT msg=audit(1182182460.953:111): user pid=10731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182182460.953:112): user pid=10731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182182460.953:113): login pid=10731 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182182460.953:114): user pid=10731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182182460.953:115): user pid=10731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182182460.953:116): user pid=10731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182186060.937:117): user pid=11055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182186060.937:118): user pid=11055 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182186060.937:119): login pid=11055 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182186060.937:120): user pid=11055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182186060.937:121): user pid=11055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182186060.937:122): user pid=11055 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182189140.923:123): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182189140.923:124): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182189147.423:125): avc:  denied  { write } for  pid=11659 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1182189147.423:125): arch=40000003 syscall=22 success=yes exit=0 a0=80f8320 a1=bff37760 a2=80f8330 a3=80f8321 items=0 ppid=11649 pid=11659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1182189197.793:6065) auditd normal halt, sending auid=4294967295 pid=11740 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2081
>type=DAEMON_START msg=audit(1182189283.582:8453) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2070 res=success, auditd pid=2070
>type=CONFIG_CHANGE msg=audit(1182189283.619:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182189283.619:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182189283.619:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182189283.619:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182189309.618:9): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_END msg=audit(1182189358.713:8454) auditd normal halt, sending auid=4294967295 pid=3187 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2070
>type=DAEMON_START msg=audit(1182336011.587:2685) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2070 res=success, auditd pid=2070
>type=CONFIG_CHANGE msg=audit(1182336011.460:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182336011.460:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182336011.460:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182336011.460:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182336037.458:9): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1182336050.458:10): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182336050.458:11): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182336050.458:12): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182336050.458:13): login pid=2782 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182336050.458:14): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182336050.458:15): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1182336357.590:16): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1182336357.590:17): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1182336357.590:18): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1182336357.590:19): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1182336369.590:20): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1182336369.590:21): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1182336370.090:22): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1182336370.090:23): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=MAC_STATUS msg=audit(1182336373.090:24): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1182336373.090:24): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfecc0f4 a2=1 a3=bfecc0f4 items=0 ppid=3599 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1182336373.090:25): user pid=2142 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1182336413.090:26): avc:  denied  { search } for  pid=3630 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182336413.090:26): arch=40000003 syscall=195 success=yes exit=0 a0=bfe53790 a1=bfe547ec a2=a000 a3=844ca10 items=0 ppid=3439 pid=3630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1182337262.083:27): user pid=3874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182337262.083:28): user pid=3874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182337262.083:29): login pid=3874 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182337262.083:30): user pid=3874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182337262.083:31): user pid=3874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182337262.083:32): user pid=3874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182340861.063:33): user pid=4170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182340861.063:34): user pid=4170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182340861.063:35): login pid=4170 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182340861.063:36): user pid=4170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182340861.063:37): user pid=4170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182340861.063:38): user pid=4170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182344461.552:39): user pid=7823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182344461.552:40): user pid=7823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182344461.552:41): login pid=7823 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182344461.552:42): user pid=7823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182344461.552:43): user pid=7823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182344461.552:44): user pid=7823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=MAC_STATUS msg=audit(1182347954.037:45): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1182347954.037:46): user pid=2142 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1182347954.037:45): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfa2fc54 a2=1 a3=bfa2fc54 items=0 ppid=3599 pid=1149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1182348061.537:47): user pid=1158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182348061.537:48): user pid=1158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182348061.537:49): login pid=1158 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182348061.537:50): user pid=1158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182348061.537:51): user pid=1158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182348061.537:52): user pid=1158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182349295.531:53): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1182349295.531:54): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1182349296.531:55): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1182349296.531:56): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1182349502.030:57): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1182349502.030:58): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1182349502.030:59): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1182349502.030:60): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1182349651.529:61): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1182349651.529:62): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1182349651.529:63): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1182349651.529:64): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_DISP msg=audit(1182350300.526:65): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1182350300.526:66): user pid=1705 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_AUTH msg=audit(1182350305.526:67): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1182350305.526:68): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1182350305.526:69): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1182350305.526:70): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=AVC msg=audit(1182350415.026:71): avc:  denied  { search } for  pid=2136 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182350415.026:71): arch=40000003 syscall=195 success=no exit=-13 a0=bfc4f8a0 a1=bfc508fc a2=a000 a3=a05da10 items=0 ppid=1995 pid=2136 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182350416.026:72): avc:  denied  { search } for  pid=2136 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182350416.026:72): arch=40000003 syscall=195 success=no exit=-13 a0=bfc4f8a0 a1=bfc508fc a2=a000 a3=a05da10 items=0 ppid=1995 pid=2136 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182350416.026:73): avc:  denied  { search } for  pid=2136 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182350416.026:73): arch=40000003 syscall=195 success=no exit=-13 a0=bfc4f8a0 a1=bfc508fc a2=a000 a3=a05da10 items=0 ppid=1995 pid=2136 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1182351661.020:74): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182351661.020:75): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182351661.020:76): login pid=2590 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182351661.020:77): user pid=2590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182351661.020:78): user pid=2590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182351661.020:79): user pid=2590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182355261.003:80): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182355261.003:81): user pid=2764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182355261.003:82): login pid=2764 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182355261.003:83): user pid=2764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182355261.003:84): user pid=2764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182355261.003:85): user pid=2764 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182358861.486:86): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182358861.486:87): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182358861.486:88): login pid=2986 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182358861.486:89): user pid=2986 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182358861.486:90): user pid=2986 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182358861.486:91): user pid=2986 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182362460.970:92): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182362460.970:93): user pid=3208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182362460.970:94): login pid=3208 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182362460.970:95): user pid=3208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182362460.970:96): user pid=3208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182362460.970:97): user pid=3208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182363150.967:98): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_ACCT msg=audit(1182363150.967:99): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_START msg=audit(1182363150.967:100): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=CRED_ACQ msg=audit(1182363150.967:101): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_AUTH msg=audit(1182363184.467:102): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=USER_ACCT msg=audit(1182363184.467:103): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=USER_START msg=audit(1182363184.467:104): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=CRED_ACQ msg=audit(1182363184.467:105): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=AVC msg=audit(1182363311.466:106): avc:  denied  { search } for  pid=3660 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363311.466:106): arch=40000003 syscall=195 success=no exit=-13 a0=bff888f0 a1=bff8994c a2=a000 a3=94e8a10 items=0 ppid=3499 pid=3660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182363311.466:107): avc:  denied  { search } for  pid=3660 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363311.466:107): arch=40000003 syscall=195 success=no exit=-13 a0=bff888f0 a1=bff8994c a2=a000 a3=94e8a10 items=0 ppid=3499 pid=3660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182363311.466:108): avc:  denied  { search } for  pid=3660 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363311.466:108): arch=40000003 syscall=195 success=no exit=-13 a0=bff888f0 a1=bff8994c a2=a000 a3=94e8a10 items=0 ppid=3499 pid=3660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1182363312.466:109): user pid=3662 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=hsqldb exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=USER_CHAUTHTOK msg=audit(1182363312.466:110): user pid=3666 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=AVC msg=audit(1182363315.466:111): avc:  denied  { search } for  pid=3738 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363315.466:111): arch=40000003 syscall=195 success=no exit=-13 a0=bf9c0970 a1=bf9c19cc a2=a000 a3=9d69a10 items=0 ppid=3499 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182363315.466:112): avc:  denied  { search } for  pid=3738 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363315.466:112): arch=40000003 syscall=195 success=no exit=-13 a0=bf9c0970 a1=bf9c19cc a2=a000 a3=9d69a10 items=0 ppid=3499 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182363315.466:113): avc:  denied  { search } for  pid=3738 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182363315.466:113): arch=40000003 syscall=195 success=no exit=-13 a0=bf9c0970 a1=bf9c19cc a2=a000 a3=9d69a10 items=0 ppid=3499 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1182364787.459:114): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=USER_END msg=audit(1182364787.459:115): user pid=3318 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/10 res=success)'
>type=CRED_DISP msg=audit(1182365015.958:116): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1182365015.958:117): user pid=1916 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_DISP msg=audit(1182365018.458:118): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1182365018.458:119): user pid=1233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1182365402.957:120): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1182365402.957:121): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1182365403.457:122): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1182365403.457:123): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1182365732.455:124): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1182365732.455:125): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1182365732.455:126): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1182365732.455:127): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1182366039.454:128): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1182366039.454:129): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1182366041.454:130): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1182366041.454:131): user pid=4462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1182366061.454:132): user pid=4705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182366061.454:133): user pid=4705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182366061.454:134): login pid=4705 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182366061.454:135): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182366061.454:136): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182366061.454:137): user pid=4705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182366675.951:138): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182366675.951:139): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1182366675.951:140): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1182366675.951:141): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1182366689.451:142): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1182366689.451:143): user pid=4746 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1182366694.951:144): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182366694.951:145): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1182366694.951:146): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1182366694.951:147): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1182366860.450:148): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1182366860.450:149): user pid=4783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1182366865.950:150): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_END msg=audit(1182366865.950:151): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_END msg=audit(1182366866.450:152): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182366866.450:153): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1182366874.870:2686) auditd normal halt, sending auid=4294967295 pid=5356 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2070
>type=DAEMON_START msg=audit(1182705368.073:7016) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1973 res=success, auditd pid=1973
>type=CONFIG_CHANGE msg=audit(1182705367.920:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182705367.920:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182705367.920:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182705367.920:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182705391.419:9): user pid=2615 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1182705404.919:10): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182705404.919:11): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182705404.919:12): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182705404.919:13): login pid=2685 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182705404.919:14): user pid=2685 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182705404.919:15): user pid=2685 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1182705595.418:16): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182705595.418:17): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1182705595.418:18): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1182705595.418:19): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1182705831.417:20): user pid=3163 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1182705834.917:21): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1182705834.917:22): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1182705834.917:23): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1182705834.917:24): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1182706187.915:25): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1182706187.915:26): user pid=3027 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=MAC_STATUS msg=audit(1182706505.914:27): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1182706505.914:27): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfc1fe44 a2=1 a3=bfc1fe44 items=0 ppid=3167 pid=3402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1182706505.914:28): user pid=2045 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_STATUS msg=audit(1182706633.913:29): enforcing=1 old_enforcing=0 auid=500
>type=SYSCALL msg=audit(1182706633.913:29): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfac7cf4 a2=1 a3=bfac7cf4 items=0 ppid=3167 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1182706633.913:30): user pid=2045 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=CRED_DISP msg=audit(1182707078.911:31): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1182707078.911:32): user pid=3164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1182707085.411:33): user pid=2685 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182707085.411:34): user pid=2685 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1182707090.954:7017) auditd normal halt, sending auid=4294967295 pid=3970 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1973
>type=DAEMON_START msg=audit(1182711630.882:1900) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1983 res=success, auditd pid=1983
>type=CONFIG_CHANGE msg=audit(1182711630.520:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182711630.520:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182711630.520:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182711630.520:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182711655.516:9): user pid=2623 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1182711662.015:10): user pid=2726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182711662.015:11): user pid=2726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182711662.015:12): login pid=2726 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182711662.015:13): user pid=2726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182711662.015:14): user pid=2726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182711662.015:15): user pid=2726 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182711669.014:16): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182711669.014:17): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182711669.014:18): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182711669.514:19): login pid=2693 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182711669.514:20): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182711669.514:21): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1182712017.961:22): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182712017.961:23): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1182712023.731:1901) auditd normal halt, sending auid=4294967295 pid=3504 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1983
>type=DAEMON_START msg=audit(1182776259.588:5252) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2053 res=success, auditd pid=2053
>type=CONFIG_CHANGE msg=audit(1182776259.189:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182776259.189:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182776259.689:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182776259.689:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182776285.185:9): user pid=2694 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1182776298.183:10): user pid=2779 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182776298.183:11): user pid=2779 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182776298.183:12): user pid=2779 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182776298.183:13): login pid=2779 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182776298.683:14): user pid=2779 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182776298.683:15): user pid=2779 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1182776335.178:16): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182776335.178:17): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1182776335.178:18): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1182776335.178:19): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1182776371.172:20): avc:  denied  { search } for  pid=3443 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776371.172:20): arch=40000003 syscall=195 success=no exit=-13 a0=bfac25a0 a1=bfac35fc a2=a000 a3=9caba10 items=0 ppid=3267 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776372.672:21): avc:  denied  { search } for  pid=3443 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776372.672:21): arch=40000003 syscall=195 success=no exit=-13 a0=bfac25a0 a1=bfac35fc a2=a000 a3=9caba10 items=0 ppid=3267 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776372.672:22): avc:  denied  { search } for  pid=3443 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776372.672:22): arch=40000003 syscall=195 success=no exit=-13 a0=bfac25a0 a1=bfac35fc a2=a000 a3=9caba10 items=0 ppid=3267 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776374.672:23): avc:  denied  { search } for  pid=3444 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776374.672:23): arch=40000003 syscall=195 success=no exit=-13 a0=bfbacb60 a1=bfbadbbc a2=a000 a3=97b6a10 items=0 ppid=3267 pid=3444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776374.672:24): avc:  denied  { search } for  pid=3444 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776374.672:24): arch=40000003 syscall=195 success=no exit=-13 a0=bfbacb60 a1=bfbadbbc a2=a000 a3=97b6a10 items=0 ppid=3267 pid=3444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776374.672:25): avc:  denied  { search } for  pid=3444 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776374.672:25): arch=40000003 syscall=195 success=no exit=-13 a0=bfbacb60 a1=bfbadbbc a2=a000 a3=97b6a10 items=0 ppid=3267 pid=3444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776386.170:26): avc:  denied  { search } for  pid=3450 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776386.170:26): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b1060 a1=bf8b20bc a2=a000 a3=846da10 items=0 ppid=3267 pid=3450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776386.170:27): avc:  denied  { search } for  pid=3450 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776386.170:27): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b1060 a1=bf8b20bc a2=a000 a3=846da10 items=0 ppid=3267 pid=3450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1182776386.170:28): avc:  denied  { search } for  pid=3450 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1182776386.170:28): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b1060 a1=bf8b20bc a2=a000 a3=846da10 items=0 ppid=3267 pid=3450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1182776395.169:29): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1182776395.169:30): user pid=3234 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1182776461.658:31): user pid=3478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182776461.658:32): user pid=3478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182776461.658:33): login pid=3478 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182776461.658:34): user pid=3478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182776461.658:35): user pid=3478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182776461.658:36): user pid=3478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182777815.885:37): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1182777815.885:38): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1182777815.885:39): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1182777815.885:40): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1182778150.530:41): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1182778150.530:42): user pid=3751 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1182778547.979:43): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1182778547.979:44): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1182778547.979:45): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1182778547.979:46): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=AVC msg=audit(1182778617.471:47): avc:  denied  { read } for  pid=20881 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182778617.471:47): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=20881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182778617.471:47):  path="eventpoll:[9114]"
>type=CRED_DISP msg=audit(1182778788.455:48): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1182778788.455:49): user pid=20796 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1182780061.375:50): user pid=21128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182780061.375:51): user pid=21128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182780061.375:52): login pid=21128 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182780061.375:53): user pid=21128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182780061.375:54): user pid=21128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182780061.375:55): user pid=21128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182780485.991:56): avc:  denied  { read } for  pid=21142 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182780485.991:56): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=21142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182780485.991:56):  path="eventpoll:[9114]"
>type=AVC msg=audit(1182780967.445:57): avc:  denied  { read } for  pid=21231 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182780967.445:57): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=21231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182780967.445:57):  path="eventpoll:[9114]"
>type=USER_ACCT msg=audit(1182783661.407:58): user pid=22839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182783661.407:59): user pid=22839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182783661.407:60): login pid=22839 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182783661.407:61): user pid=22839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182783661.407:62): user pid=22839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182783661.407:63): user pid=22839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182787261.876:64): user pid=23198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182787261.876:65): user pid=23198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182787261.876:66): login pid=23198 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182787261.876:67): user pid=23198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182787261.876:68): user pid=23198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182787261.876:69): user pid=23198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182787669.858:70): avc:  denied  { read } for  pid=23209 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182787669.858:70): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=23209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182787669.858:70):  path="eventpoll:[9114]"
>type=AVC msg=audit(1182788222.455:71): avc:  denied  { read } for  pid=23233 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182788222.455:71): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=23233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182788222.455:71):  path="eventpoll:[9114]"
>type=USER_ACCT msg=audit(1182790860.876:72): user pid=23467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182790860.876:73): user pid=23467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182790860.876:74): login pid=23467 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182790860.876:75): user pid=23467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182790860.876:76): user pid=23467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182790860.876:77): user pid=23467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182791454.373:78): avc:  denied  { read } for  pid=23517 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182791454.373:78): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=23517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182791454.373:78):  path="eventpoll:[9114]"
>type=AVC msg=audit(1182791718.876:79): avc:  denied  { read } for  pid=23538 comm="smtp" name="[9114]" dev=eventpollfs ino=9114 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182791718.876:79): arch=40000003 syscall=11 success=yes exit=0 a0=80d86a20 a1=80d86ac0 a2=80d831a8 a3=1 items=0 ppid=2290 pid=23538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182791718.876:79):  path="eventpoll:[9114]"
>type=USER_ACCT msg=audit(1182794460.883:80): user pid=23752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182794460.883:81): user pid=23752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182794460.883:82): login pid=23752 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182794460.883:83): user pid=23752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182794460.883:84): user pid=23752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182794460.883:85): user pid=23752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182794525.384:86): user pid=2779 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182794525.384:87): user pid=2779 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1182794531.384:88): avc:  denied  { write } for  pid=24078 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182794531.384:88): avc:  denied  { write } for  pid=24078 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182794531.384:88): avc:  denied  { write } for  pid=24078 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182794531.384:88): avc:  denied  { write } for  pid=24078 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1182794531.384:88): avc:  denied  { write } for  pid=24078 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1182794531.384:88): arch=40000003 syscall=22 success=yes exit=0 a0=91a4320 a1=bf82d7c0 a2=91a4330 a3=91a4321 items=0 ppid=24068 pid=24078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1182794596.736:5253) auditd normal halt, sending auid=4294967295 pid=24167 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2053
>type=DAEMON_START msg=audit(1182938600.573:6877) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2061 res=success, auditd pid=2061
>type=CONFIG_CHANGE msg=audit(1182938600.469:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182938600.469:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1182938600.469:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1182938600.469:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1182938625.466:9): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1182938638.465:10): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1182938638.465:11): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1182938638.465:12): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1182938638.465:13): login pid=2785 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1182938638.465:14): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1182938638.465:15): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1182940202.190:16): avc:  denied  { read } for  pid=3359 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182940202.190:16): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182940202.190:16):  path="eventpoll:[9390]"
>type=AVC msg=audit(1182940202.190:17): avc:  denied  { read } for  pid=3360 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182940202.190:17): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182940202.190:17):  path="eventpoll:[9390]"
>type=AVC msg=audit(1182940939.682:18): avc:  denied  { read } for  pid=3379 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182940939.682:18): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=3379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182940939.682:18):  path="eventpoll:[9390]"
>type=AVC msg=audit(1182941198.681:19): avc:  denied  { read } for  pid=3385 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182941198.681:19): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182941198.681:19):  path="eventpoll:[9390]"
>type=USER_ACCT msg=audit(1182942061.679:20): user pid=3405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182942061.679:21): user pid=3405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182942061.679:22): login pid=3405 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182942061.679:23): user pid=3405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182942061.679:24): user pid=3405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182942061.679:25): user pid=3405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182945198.183:26): avc:  denied  { read } for  pid=3685 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182945198.183:26): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=3685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182945198.183:26):  path="eventpoll:[9390]"
>type=USER_ACCT msg=audit(1182945661.187:27): user pid=3963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182945661.187:28): user pid=3963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182945661.187:29): login pid=3963 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182945661.187:30): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182945661.187:31): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182945661.187:32): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182949261.082:33): user pid=29908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182949261.082:34): user pid=29908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182949261.082:35): login pid=29908 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182949261.082:36): user pid=29908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182949261.082:37): user pid=29908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182949261.082:38): user pid=29908 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182952861.413:39): user pid=30332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182952861.413:40): user pid=30332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182952861.413:41): login pid=30332 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182952861.413:42): user pid=30332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182952861.413:43): user pid=30332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182952861.413:44): user pid=30332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1182955572.784:45): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1182955572.784:46): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1182955572.784:47): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1182955572.784:48): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_DISP msg=audit(1182955587.783:49): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1182955587.783:50): user pid=30635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_AUTH msg=audit(1182955622.282:51): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1182955622.282:52): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1182955622.282:53): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1182955622.282:54): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1182955630.781:55): dev=eth1 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1182955630.781:55): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bffd42b0 a2=4bdf6ef8 a3=3 items=0 ppid=30810 pid=30840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 comm="tcpdump" exe="/usr/sbin/tcpdump" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1182955654.280:56): dev=eth1 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1182955654.280:56): arch=40000003 syscall=6 success=yes exit=0 a0=3 a1=1 a2=4bdf6ef8 a3=93ff408 items=0 ppid=30810 pid=30840 auid=500 uid=72 gid=72 euid=72 suid=72 fsuid=72 egid=72 sgid=72 fsgid=72 tty=pts6 comm="tcpdump" exe="/usr/sbin/tcpdump" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=CRED_DISP msg=audit(1182955658.280:57): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1182955658.280:58): user pid=30807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1182956461.742:59): user pid=30867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182956461.742:60): user pid=30867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182956461.742:61): login pid=30867 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182956461.742:62): user pid=30867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182956461.742:63): user pid=30867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182956461.742:64): user pid=30867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182960061.071:65): user pid=31272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182960061.071:66): user pid=31272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182960061.071:67): login pid=31272 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182960061.071:68): user pid=31272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182960061.071:69): user pid=31272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182960061.071:70): user pid=31272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182960264.561:71): avc:  denied  { read } for  pid=31420 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182960264.561:71): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=31420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182960264.561:71):  path="eventpoll:[9390]"
>type=AVC msg=audit(1182963131.425:72): avc:  denied  { read } for  pid=31552 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182963131.425:72): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=31552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182963131.425:72):  path="eventpoll:[9390]"
>type=USER_ACCT msg=audit(1182963661.399:73): user pid=31571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182963661.399:74): user pid=31571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182963661.399:75): login pid=31571 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182963661.399:76): user pid=31571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182963661.399:77): user pid=31571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182963661.399:78): user pid=31571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1182966462.266:79): avc:  denied  { read } for  pid=31967 comm="smtp" name="[9390]" dev=eventpollfs ino=9390 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1182966462.266:79): arch=40000003 syscall=11 success=yes exit=0 a0=80e46a20 a1=80e46ac0 a2=80e431a8 a3=1 items=0 ppid=2296 pid=31967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1182966462.266:79):  path="eventpoll:[9390]"
>type=USER_ACCT msg=audit(1182967261.228:80): user pid=31998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182967261.228:81): user pid=31998 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182967261.228:82): login pid=31998 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182967261.228:83): user pid=31998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182967261.228:84): user pid=31998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182967261.228:85): user pid=31998 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1182970861.580:86): user pid=32278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1182970861.580:87): user pid=32278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1182970861.580:88): login pid=32278 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1182970861.580:89): user pid=32278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1182970861.580:90): user pid=32278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182970861.580:91): user pid=32278 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1182971454.071:92): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1182971454.071:93): user pid=2785 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_START msg=audit(1183117677.527:9198) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2079 res=success, auditd pid=2079
>type=CONFIG_CHANGE msg=audit(1183117677.444:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183117677.444:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1183117677.444:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183117677.444:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1183117701.942:9): user pid=2718 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1183117714.441:10): user pid=2803 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183117714.441:11): user pid=2803 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1183117714.441:12): user pid=2803 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1183117714.441:13): login pid=2803 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1183117714.441:14): user pid=2803 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1183117714.441:15): user pid=2803 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183118461.075:16): user pid=3327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183118461.075:17): user pid=3327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183118461.075:18): login pid=3327 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183118461.075:19): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183118461.075:20): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183118461.075:21): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183119883.047:22): avc:  denied  { read } for  pid=3360 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183119883.047:22): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183119883.047:22):  path="eventpoll:[9105]"
>type=USER_ACCT msg=audit(1183122061.043:23): user pid=3610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183122061.043:24): user pid=3610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183122061.043:25): login pid=3610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183122061.043:26): user pid=3610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183122061.043:27): user pid=3610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183122061.043:28): user pid=3610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183122175.542:29): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1183122175.542:30): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1183122175.542:31): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1183122175.542:32): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1183122181.042:33): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1183122181.042:34): user pid=3614 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1183124428.038:35): avc:  denied  { read } for  pid=3879 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183124428.038:35): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183124428.038:35):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183125187.037:36): avc:  denied  { read } for  pid=4312 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183125187.037:36): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183125187.037:36):  path="eventpoll:[9105]"
>type=USER_ACCT msg=audit(1183125661.036:37): user pid=4321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183125661.036:38): user pid=4321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183125661.036:39): login pid=4321 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183125661.036:40): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183125661.036:41): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183125661.036:42): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183125771.036:43): avc:  denied  { read } for  pid=4328 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183125771.036:43): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183125771.036:43):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183126247.536:44): avc:  denied  { read } for  pid=4341 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183126247.536:44): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183126247.536:44):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183126601.034:45): avc:  denied  { read } for  pid=4361 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183126601.034:45): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183126601.034:45):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183126876.534:46): avc:  denied  { read } for  pid=4418 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183126876.534:46): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183126876.534:46):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183127102.032:47): avc:  denied  { read } for  pid=4428 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183127102.032:47): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183127102.032:47):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183128882.528:48): avc:  denied  { read } for  pid=4636 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183128882.528:48): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183128882.528:48):  path="eventpoll:[9105]"
>type=USER_ACCT msg=audit(1183129261.027:49): user pid=4647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183129261.027:50): user pid=4647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183129261.027:51): login pid=4647 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183129261.027:52): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183129261.027:53): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183129261.027:54): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183129294.027:55): avc:  denied  { read } for  pid=4653 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183129294.027:55): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183129294.027:55):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183129544.526:56): avc:  denied  { read } for  pid=4720 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183129544.526:56): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183129544.526:56):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183129799.526:57): avc:  denied  { read } for  pid=4738 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183129799.526:57): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183129799.526:57):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183130159.525:58): avc:  denied  { read } for  pid=4749 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183130159.525:58): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183130159.525:58):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183130712.024:59): avc:  denied  { read } for  pid=4767 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183130712.024:59): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183130712.024:59):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183131120.523:60): avc:  denied  { read } for  pid=4781 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183131120.523:60): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183131120.523:60):  path="eventpoll:[9105]"
>type=AVC msg=audit(1183131701.021:61): avc:  denied  { read } for  pid=4794 comm="smtp" name="[9105]" dev=eventpollfs ino=9105 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183131701.021:61): arch=40000003 syscall=11 success=yes exit=0 a0=80d90a20 a1=80d90ac0 a2=80d8d1a8 a3=1 items=0 ppid=2314 pid=4794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183131701.021:61):  path="eventpoll:[9105]"
>type=USER_ACCT msg=audit(1183132861.019:62): user pid=4946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183132861.019:63): user pid=4946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183132861.019:64): login pid=4946 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183132861.019:65): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183132861.019:66): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183132861.019:67): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183136461.508:68): user pid=5136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183136461.508:69): user pid=5136 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183136461.508:70): login pid=5136 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183136461.508:71): user pid=5136 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183136461.508:72): user pid=5136 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183136461.508:73): user pid=5136 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183140060.995:74): user pid=5334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183140060.995:75): user pid=5334 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183140060.995:76): login pid=5334 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183140060.995:77): user pid=5334 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183140060.995:78): user pid=5334 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183140060.995:79): user pid=5334 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183143661.482:80): user pid=5558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183143661.482:81): user pid=5558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183143661.482:82): login pid=5558 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183143661.482:83): user pid=5558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183143661.482:84): user pid=5558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183143661.482:85): user pid=5558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183145095.477:86): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1183145095.477:87): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1183145095.477:88): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1183145095.477:89): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=CRED_DISP msg=audit(1183145127.477:91): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1183145127.477:92): user pid=5615 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1183145127.477:93): user pid=2803 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1183145127.477:94): user pid=2803 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1183145146.477:95): user pid=2713 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1183145146.477:96): user pid=2713 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1183145146.477:97): login pid=2713 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1183145146.977:98): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1183145146.977:99): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1183145146.977:100): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1183145146.977:101): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183145100.477:90): avc:  denied  { write } for  pid=5660 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1183145100.477:90): arch=40000003 syscall=22 success=yes exit=0 a0=8698320 a1=bfc79bb0 a2=8698330 a3=8698321 items=0 ppid=1 pid=5660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=user_u:system_r:mount_t:s0 key=(null)
>type=CRED_DISP msg=audit(1183145196.976:102): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1183145196.976:103): user pid=2713 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1183145199.831:9199) auditd normal halt, sending auid=4294967295 pid=6046 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2079
>type=DAEMON_START msg=audit(1183635504.554:5176) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2057 res=success, auditd pid=2057
>type=CONFIG_CHANGE msg=audit(1183635504.447:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183635504.447:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1183635504.447:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183635504.447:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_ERR msg=audit(1183635529.946:9): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1183635544.446:10): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183635544.446:11): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1183635544.446:12): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1183635544.446:13): login pid=2781 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1183635544.446:14): user pid=2781 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1183635544.446:15): user pid=2781 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1183635585.445:16): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1183635585.445:17): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1183635585.445:18): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1183635585.445:19): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1183635605.945:20): avc:  denied  { search } for  pid=3423 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1183635605.945:20): arch=40000003 syscall=195 success=no exit=-13 a0=bf9859e0 a1=bf986a3c a2=a000 a3=81c9a10 items=0 ppid=3287 pid=3423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1183635606.945:21): avc:  denied  { search } for  pid=3423 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1183635606.945:21): arch=40000003 syscall=195 success=no exit=-13 a0=bf9859e0 a1=bf986a3c a2=a000 a3=81c9a10 items=0 ppid=3287 pid=3423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1183635607.445:22): avc:  denied  { search } for  pid=3423 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1183635607.445:22): arch=40000003 syscall=195 success=no exit=-13 a0=bf9859e0 a1=bf986a3c a2=a000 a3=81c9a10 items=0 ppid=3287 pid=3423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1183635697.444:23): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1183635697.444:24): user pid=3254 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1183636165.286:25): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1183636165.286:26): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1183636165.786:27): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1183636165.786:28): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1183636171.786:29): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1183636171.786:30): user pid=3707 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1183636861.274:31): user pid=3865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183636861.274:32): user pid=3865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183636861.274:33): login pid=3865 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183636861.274:34): user pid=3865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183636861.274:35): user pid=3865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183636861.274:36): user pid=3865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183637075.771:37): avc:  denied  { read } for  pid=3876 comm="smtp" name="[9017]" dev=eventpollfs ino=9017 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183637075.771:37): arch=40000003 syscall=11 success=yes exit=0 a0=80251a20 a1=80251ac0 a2=8024e1a8 a3=1 items=0 ppid=2292 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183637075.771:37):  path="eventpoll:[9017]"
>type=USER_AUTH msg=audit(1183638761.256:38): user pid=4117 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1183638761.256:39): user pid=4117 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1183638761.256:40): user pid=4117 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1183638933.255:41): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1183638933.255:42): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1183638933.255:43): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1183639088.254:44): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1183639123.753:45): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1183639154.253:46): user pid=4117 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1183639560.750:47): avc:  denied  { read } for  pid=4371 comm="smtp" name="[9017]" dev=eventpollfs ino=9017 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183639560.750:47): arch=40000003 syscall=11 success=yes exit=0 a0=80251a20 a1=80251ac0 a2=8024e1a8 a3=1 items=0 ppid=2292 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183639560.750:47):  path="eventpoll:[9017]"
>type=USER_ACCT msg=audit(1183640461.245:48): user pid=4389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183640461.245:49): user pid=4389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183640461.245:50): login pid=4389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183640461.245:51): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183640461.245:52): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183640461.245:53): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183640726.244:54): avc:  denied  { read } for  pid=4397 comm="smtp" name="[9017]" dev=eventpollfs ino=9017 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183640726.244:54): arch=40000003 syscall=11 success=yes exit=0 a0=80251a20 a1=80251ac0 a2=8024e1a8 a3=1 items=0 ppid=2292 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183640726.244:54):  path="eventpoll:[9017]"
>type=USER_AUTH msg=audit(1183643157.230:55): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1183643157.230:56): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1183643157.230:57): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1183643157.230:58): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1183644061.228:59): user pid=7665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183644061.228:60): user pid=7665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183644061.228:61): login pid=7665 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183644061.228:62): user pid=7665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183644061.228:63): user pid=7665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183644061.228:64): user pid=7665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183644592.729:65): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1183644592.729:66): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1183644592.729:67): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1183644592.729:68): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_AUTH msg=audit(1183646484.726:69): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_ACCT msg=audit(1183646484.726:70): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_START msg=audit(1183646485.226:71): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=CRED_ACQ msg=audit(1183646485.226:72): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_AUTH msg=audit(1183646756.725:73): user pid=1528 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1183646756.725:74): user pid=1528 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1183646756.725:75): user pid=1528 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1183646770.225:76): user pid=1528 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1183646781.225:77): user pid=1543 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1183646781.225:78): user pid=1543 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1183646781.225:79): user pid=1543 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1183646789.725:80): user pid=1543 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1183647400.223:81): avc:  denied  { read } for  pid=1572 comm="smtp" name="[9017]" dev=eventpollfs ino=9017 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183647400.223:81): arch=40000003 syscall=11 success=yes exit=0 a0=80251a20 a1=80251ac0 a2=8024e1a8 a3=1 items=0 ppid=2292 pid=1572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183647400.223:81):  path="eventpoll:[9017]"
>type=USER_ACCT msg=audit(1183647660.721:82): user pid=1577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183647660.721:83): user pid=1577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183647660.721:84): login pid=1577 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183647660.721:85): user pid=1577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183647660.721:86): user pid=1577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183647660.721:87): user pid=1577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183647785.221:88): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1183647785.221:89): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1183647785.221:90): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1183647785.221:91): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_DISP msg=audit(1183647791.221:92): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1183647791.221:93): user pid=1583 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1183651261.708:94): user pid=1834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183651261.708:95): user pid=1834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183651261.708:96): login pid=1834 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183651261.708:97): user pid=1834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183651261.708:98): user pid=1834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183651261.708:99): user pid=1834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183654861.194:100): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183654861.194:101): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183654861.194:102): login pid=2044 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183654861.194:103): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183654861.194:104): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183654861.194:105): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183658079.678:106): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1183658079.678:107): user pid=7503 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_DISP msg=audit(1183658081.678:108): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1183658081.678:109): user pid=7788 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_DISP msg=audit(1183658081.678:110): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_END msg=audit(1183658081.678:111): user pid=1425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_END msg=audit(1183658100.178:112): user pid=2781 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1183658100.178:113): user pid=2781 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183658107.178:114): avc:  denied  { write } for  pid=2678 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1183658107.178:114): arch=40000003 syscall=22 success=yes exit=0 a0=94ec320 a1=bfc976e0 a2=94ec330 a3=94ec321 items=0 ppid=2668 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1183658155.690:5177) auditd normal halt, sending auid=4294967295 pid=2768 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2057
>type=DAEMON_START msg=audit(1183715238.587:3316) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2069 res=success, auditd pid=2069
>type=CONFIG_CHANGE msg=audit(1183715238.345:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183715238.345:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1183715238.345:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183715238.345:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1183715245.344:9): user pid=2235 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1183715264.843:10): user pid=2708 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1183715300.343:11): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183715300.343:12): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1183715300.343:13): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1183715300.343:14): login pid=2793 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1183715300.343:15): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1183715300.343:16): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183716061.896:17): user pid=3349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183716061.896:18): user pid=3349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183716061.896:19): login pid=3349 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183716061.896:20): user pid=3349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183716061.896:21): user pid=3349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183716061.896:22): user pid=3349 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183716821.892:23): avc:  denied  { read } for  pid=3366 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183716821.892:23): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=3366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183716821.892:23):  path="eventpoll:[9119]"
>type=USER_AUTH msg=audit(1183716857.392:24): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1183716857.392:25): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1183716857.392:26): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1183716857.392:27): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1183716865.892:28): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1183716865.892:29): user pid=3427 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1183717084.891:30): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1183717084.891:31): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1183717085.391:32): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1183717085.391:33): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1183717256.890:34): avc:  denied  { read } for  pid=3680 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183717256.890:34): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183717256.890:34):  path="eventpoll:[9119]"
>type=AVC msg=audit(1183718152.385:35): avc:  denied  { read } for  pid=3861 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183718152.385:35): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183718152.385:35):  path="eventpoll:[9119]"
>type=USER_ACCT msg=audit(1183719660.878:36): user pid=4051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183719660.878:37): user pid=4051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183719660.878:38): login pid=4051 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183719660.878:39): user pid=4051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183719660.878:40): user pid=4051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183719660.878:41): user pid=4051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183721238.871:42): user pid=4132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1183721238.871:43): user pid=4132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1183721238.871:44): user pid=4132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1183721245.371:45): user pid=4132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1183722800.867:46): avc:  denied  { read } for  pid=4993 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183722800.867:46): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183722800.867:46):  path="eventpoll:[9119]"
>type=USER_ACCT msg=audit(1183723260.865:47): user pid=5009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183723260.865:48): user pid=5009 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183723260.865:49): login pid=5009 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183723260.865:50): user pid=5009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183723260.865:51): user pid=5009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183723260.865:52): user pid=5009 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183724870.859:53): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1183724870.859:54): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1183724870.859:55): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1183724870.859:56): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_DISP msg=audit(1183724985.858:57): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1183724985.858:58): user pid=5424 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1183726860.849:59): user pid=6453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183726860.849:60): user pid=6453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183726860.849:61): login pid=6453 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183726860.849:62): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183726860.849:63): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183726860.849:64): user pid=6453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183727419.347:65): avc:  denied  { read } for  pid=6479 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183727419.347:65): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=6479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183727419.347:65):  path="eventpoll:[9119]"
>type=USER_ACCT msg=audit(1183730461.832:66): user pid=6759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183730461.832:67): user pid=6759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183730461.832:68): login pid=6759 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183730461.832:69): user pid=6759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183730461.832:70): user pid=6759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183730461.832:71): user pid=6759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183734061.316:72): user pid=7102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183734061.316:73): user pid=7102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183734061.316:74): login pid=7102 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183734061.316:75): user pid=7102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183734061.316:76): user pid=7102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183734061.316:77): user pid=7102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183737117.302:78): avc:  denied  { read } for  pid=7311 comm="smtp" name="[9119]" dev=eventpollfs ino=9119 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183737117.302:78): arch=40000003 syscall=11 success=yes exit=0 a0=806dfa20 a1=806dfac0 a2=806dc1a8 a3=1 items=0 ppid=2304 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183737117.302:78):  path="eventpoll:[9119]"
>type=USER_AUTH msg=audit(1183737440.800:79): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1183737440.800:80): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1183737440.800:81): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1183737440.800:82): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1183737661.300:83): user pid=7517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183737661.300:84): user pid=7517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183737661.300:85): login pid=7517 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183737661.300:86): user pid=7517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183737661.800:87): user pid=7517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183737661.800:88): user pid=7517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183737672.800:89): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1183737672.800:90): user pid=7452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1183739137.295:91): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1183739137.295:92): user pid=3560 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1183739188.795:93): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1183739188.795:94): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1183739195.795:95): avc:  denied  { write } for  pid=7917 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183739195.795:95): avc:  denied  { write } for  pid=7917 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183739195.795:95): avc:  denied  { write } for  pid=7917 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1183739195.795:95): avc:  denied  { write } for  pid=7917 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1183739195.795:95): arch=40000003 syscall=22 success=yes exit=0 a0=86bb320 a1=bff175c0 a2=86bb330 a3=86bb321 items=0 ppid=7907 pid=7917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1183739230.390:3317) auditd normal halt, sending auid=4294967295 pid=8006 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2069
>type=DAEMON_START msg=audit(1183976978.613:4636) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2056 res=success, auditd pid=2056
>type=CONFIG_CHANGE msg=audit(1183976978.628:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183976978.628:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1183976978.628:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1183976978.628:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1183976985.127:9): user pid=2222 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1183977005.126:10): user pid=2703 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1183977031.126:11): user pid=2780 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1183977031.126:12): user pid=2780 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1183977031.126:13): user pid=2780 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1183977031.126:14): login pid=2780 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1183977031.126:15): user pid=2780 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1183977031.126:16): user pid=2780 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1183977950.759:17): avc:  denied  { read } for  pid=3254 comm="smtp" name="[9049]" dev=eventpollfs ino=9049 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183977950.759:17): arch=40000003 syscall=11 success=yes exit=0 a0=8153fa20 a1=8153fac0 a2=8153c1a8 a3=1 items=0 ppid=2291 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183977950.759:17):  path="eventpoll:[9049]"
>type=USER_ACCT msg=audit(1183978861.756:18): user pid=3360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183978861.756:19): user pid=3360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183978861.756:20): login pid=3360 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183978861.756:21): user pid=3360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183978861.756:22): user pid=3360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183978861.756:23): user pid=3360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1183979304.755:24): avc:  denied  { read } for  pid=3374 comm="smtp" name="[9049]" dev=eventpollfs ino=9049 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183979304.755:24): arch=40000003 syscall=11 success=yes exit=0 a0=8153fa20 a1=8153fac0 a2=8153c1a8 a3=1 items=0 ppid=2291 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183979304.755:24):  path="eventpoll:[9049]"
>type=AVC msg=audit(1183979854.252:25): avc:  denied  { read } for  pid=3449 comm="smtp" name="[9049]" dev=eventpollfs ino=9049 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183979854.252:25): arch=40000003 syscall=11 success=yes exit=0 a0=8153fa20 a1=8153fac0 a2=8153c1a8 a3=1 items=0 ppid=2291 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183979854.252:25):  path="eventpoll:[9049]"
>type=AVC msg=audit(1183981251.747:26): avc:  denied  { read } for  pid=3624 comm="smtp" name="[9049]" dev=eventpollfs ino=9049 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1183981251.747:26): arch=40000003 syscall=11 success=yes exit=0 a0=8153fa20 a1=8153fac0 a2=8153c1a8 a3=1 items=0 ppid=2291 pid=3624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1183981251.747:26):  path="eventpoll:[9049]"
>type=USER_ACCT msg=audit(1183982461.242:27): user pid=3695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183982461.242:28): user pid=3695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183982461.242:29): login pid=3695 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183982461.242:30): user pid=3695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183982461.242:31): user pid=3695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183982461.242:32): user pid=3695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1183983094.239:33): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1183983094.239:34): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1183983094.239:35): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1183983094.239:36): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1183983100.739:37): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1183983100.739:38): user pid=3741 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1183983118.739:39): user pid=3848 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1183983118.739:40): user pid=3848 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1183983118.739:41): user pid=3848 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1183983125.739:42): user pid=3848 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1183983135.739:43): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1183983135.739:44): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1183983135.739:45): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1183983135.739:46): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_AUTH msg=audit(1183984810.231:47): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_ACCT msg=audit(1183984810.231:48): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_START msg=audit(1183984810.231:49): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=CRED_ACQ msg=audit(1183984810.231:50): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=CRED_DISP msg=audit(1183984827.231:51): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_END msg=audit(1183984827.231:52): user pid=4682 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_ACCT msg=audit(1183986060.727:53): user pid=4950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183986060.727:54): user pid=4950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183986060.727:55): login pid=4950 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183986060.727:56): user pid=4950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183986060.727:57): user pid=4950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183986060.727:58): user pid=4950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183989661.211:59): user pid=5151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183989661.211:60): user pid=5151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183989661.211:61): login pid=5151 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183989661.211:62): user pid=5151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183989661.211:63): user pid=5151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183989661.211:64): user pid=5151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183993261.195:65): user pid=5388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183993261.195:66): user pid=5388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183993261.195:67): login pid=5388 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183993261.195:68): user pid=5388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183993261.195:69): user pid=5388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183993261.195:70): user pid=5388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1183996861.679:71): user pid=5626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1183996861.679:72): user pid=5626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1183996861.679:73): login pid=5626 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1183996861.679:74): user pid=5626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1183996861.679:75): user pid=5626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1183996861.679:76): user pid=5626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184000461.164:77): user pid=5846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184000461.164:78): user pid=5846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184000461.164:79): login pid=5846 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184000461.164:80): user pid=5846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184000461.164:81): user pid=5846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184000461.164:82): user pid=5846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184003576.652:83): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184003576.652:84): user pid=3897 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184003601.152:85): user pid=2780 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1184003601.152:86): user pid=2780 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1184003607.605:4637) auditd normal halt, sending auid=4294967295 pid=6473 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2056
>type=DAEMON_START msg=audit(1184143783.589:5044) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2042 res=success, auditd pid=2042
>type=CONFIG_CHANGE msg=audit(1184143783.639:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184143783.639:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1184143783.639:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184143783.639:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1184143790.637:9): user pid=2226 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1184143810.137:10): user pid=2710 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1184143845.637:11): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1184143845.637:12): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1184143845.637:13): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1184143845.637:14): login pid=2784 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1184143845.637:15): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1184143845.637:16): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1184143958.136:17): avc:  denied  { read } for  pid=3238 comm="smtp" name="[9100]" dev=eventpollfs ino=9100 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184143958.136:17): arch=40000003 syscall=11 success=yes exit=0 a0=811fba20 a1=811fbac0 a2=811f81a8 a3=1 items=0 ppid=2295 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184143958.136:17):  path="eventpoll:[9100]"
>type=USER_ACCT msg=audit(1184144461.882:18): user pid=3347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184144461.882:19): user pid=3347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184144461.882:20): login pid=3347 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184144461.882:21): user pid=3347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184144461.882:22): user pid=3347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184144461.882:23): user pid=3347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1184144597.382:24): avc:  denied  { read } for  pid=3354 comm="smtp" name="[9100]" dev=eventpollfs ino=9100 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184144597.382:24): arch=40000003 syscall=11 success=yes exit=0 a0=811fba20 a1=811fbac0 a2=811f81a8 a3=1 items=0 ppid=2295 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184144597.382:24):  path="eventpoll:[9100]"
>type=USER_AUTH msg=audit(1184146205.876:25): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1184146205.876:26): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1184146206.376:27): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1184146206.376:28): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1184146215.376:29): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1184146215.376:30): user pid=3534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1184148060.868:31): user pid=3769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184148060.868:32): user pid=3769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184148060.868:33): login pid=3769 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184148060.868:34): user pid=3769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184148060.868:35): user pid=3769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184148060.868:36): user pid=3769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1184148680.866:37): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184148680.866:38): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184148681.366:39): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1184148681.366:40): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_AUTH msg=audit(1184148693.366:41): user pid=3844 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1184148693.366:42): user pid=3844 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1184148693.366:43): user pid=3844 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1184148701.366:44): user pid=3844 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1184148735.865:45): user pid=3885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1184148735.865:46): user pid=3885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1184148735.865:47): user pid=3885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1184148763.365:48): user pid=3885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1184148898.865:49): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1184148898.865:49): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfa28454 a2=1 a3=bfa28454 items=0 ppid=3812 pid=3941 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1184148898.865:50): user pid=3851 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1184148898.865:51): user pid=2114 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1184148902.365:52): user pid=3945 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1184148902.365:53): user pid=3945 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1184148902.365:54): user pid=3945 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1184148907.865:55): user pid=3945 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1184148909.865:56): enforcing=1 old_enforcing=0 auid=500
>type=USER_AVC msg=audit(1184148909.865:57): user pid=2114 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1184148909.865:56): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd4e774 a2=1 a3=bfd4e774 items=0 ppid=3812 pid=3954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1184148909.865:58): user pid=3851 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1184148982.864:59): user pid=3984 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184148982.864:60): user pid=3984 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184148982.864:61): user pid=3984 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184148987.364:62): user pid=3984 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1184148996.864:63): user pid=3996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184148996.864:64): user pid=3996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184148996.864:65): user pid=3996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184149000.364:66): user pid=3996 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1184149009.364:67): user pid=4009 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184149009.364:68): user pid=4009 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184149009.364:69): user pid=4009 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184149018.864:70): user pid=4009 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1184149024.364:71): user pid=4022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184149024.364:72): user pid=4022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184149026.364:73): user pid=4022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184149079.364:74): user pid=4022 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1184149238.863:75): user pid=4162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184149238.863:76): user pid=4162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184149238.863:77): user pid=4162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184149243.863:78): user pid=4162 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1184149257.363:79): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184149257.363:80): user pid=3809 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184151660.854:81): user pid=4638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184151660.854:82): user pid=4638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184151660.854:83): login pid=4638 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184151660.854:84): user pid=4638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184151660.854:85): user pid=4638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184151660.854:86): user pid=4638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184155260.839:87): user pid=4826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184155260.839:88): user pid=4826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184155260.839:89): login pid=4826 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184155260.839:90): user pid=4826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184155260.839:91): user pid=4826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184155260.839:92): user pid=4826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184158860.823:93): user pid=5006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184158860.823:94): user pid=5006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184158860.823:95): login pid=5006 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184158860.823:96): user pid=5006 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184158860.823:97): user pid=5006 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184158860.823:98): user pid=5006 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184162461.808:99): user pid=5214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184162461.808:100): user pid=5214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184162461.808:101): login pid=5214 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184162461.808:102): user pid=5214 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184162461.808:103): user pid=5214 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184162461.808:104): user pid=5214 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184166061.293:105): user pid=5432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184166061.293:106): user pid=5432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184166061.293:107): login pid=5432 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184166061.293:108): user pid=5432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184166061.293:109): user pid=5432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184166061.293:110): user pid=5432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184169660.778:111): user pid=5739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184169660.778:112): user pid=5739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184169660.778:113): login pid=5739 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184169660.778:114): user pid=5739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184169660.778:115): user pid=5739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184169660.778:116): user pid=5739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184173261.262:117): user pid=5995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184173261.262:118): user pid=5995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184173261.262:119): login pid=5995 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184173261.262:120): user pid=5995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184173261.262:121): user pid=5995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184173261.262:122): user pid=5995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1184173379.762:123): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184173379.762:124): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1184173379.762:125): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1184173379.762:126): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1184176861.247:127): user pid=6561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184176861.247:128): user pid=6561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184176861.247:129): login pid=6561 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184176861.247:130): user pid=6561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184176861.247:131): user pid=6561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184176861.247:132): user pid=6561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184178624.739:133): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1184178624.739:134): user pid=6000 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_AUTH msg=audit(1184179049.737:135): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1184179049.737:136): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1184179049.737:137): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1184179049.737:138): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1184179231.236:139): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1184179231.236:140): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1184179231.236:141): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1184179231.236:142): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1184179276.736:143): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1184179276.736:144): user pid=6840 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1184179303.736:145): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1184179303.736:146): user pid=6726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1184179308.736:147): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1184179308.736:148): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1184179315.233:5045) auditd normal halt, sending auid=4294967295 pid=7417 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2042
>type=DAEMON_START msg=audit(1184309628.599:8964) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2030 res=success, auditd pid=2030
>type=CONFIG_CHANGE msg=audit(1184309628.298:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184309628.298:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1184309628.298:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184309628.298:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1184309635.297:9): user pid=2196 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1184309653.796:10): user pid=2669 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1184309666.796:11): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1184309666.796:12): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1184309666.796:13): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1184309666.796:14): login pid=2754 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1184309667.296:15): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1184309667.296:16): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1184310026.821:17): avc:  denied  { read } for  pid=3213 comm="smtp" name="[9062]" dev=eventpollfs ino=9062 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184310026.821:17): arch=40000003 syscall=11 success=yes exit=0 a0=8164fa20 a1=8164fac0 a2=8164c1a8 a3=1 items=0 ppid=2265 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184310026.821:17):  path="eventpoll:[9062]"
>type=USER_ACCT msg=audit(1184310061.321:18): user pid=3264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184310061.321:19): user pid=3264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184310061.321:20): login pid=3264 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184310061.321:21): user pid=3264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184310061.321:22): user pid=3264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184310061.321:23): user pid=3264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1184311404.313:24): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1184311404.313:25): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1184311404.313:26): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1184311404.313:27): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_AUTH msg=audit(1184311420.813:28): user pid=3500 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1184311420.813:29): user pid=3500 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1184311420.813:30): user pid=3500 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1184311425.813:31): user pid=3500 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_STATUS msg=audit(1184311985.811:32): enforcing=0 old_enforcing=1 auid=500
>type=SYSCALL msg=audit(1184311985.811:32): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf9f6c24 a2=1 a3=bf9f6c24 items=0 ppid=3450 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1184311985.811:33): user pid=2102 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1184311985.811:34): user pid=3507 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=MAC_STATUS msg=audit(1184311994.311:35): enforcing=1 old_enforcing=0 auid=500
>type=SYSCALL msg=audit(1184311994.311:35): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf9a33c4 a2=1 a3=bf9a33c4 items=0 ppid=3450 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AVC msg=audit(1184311994.311:36): user pid=3507 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1184311994.311:37): user pid=2102 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_ACCT msg=audit(1184313660.805:38): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184313660.805:39): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184313660.805:40): login pid=6139 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184313660.805:41): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184313660.805:42): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184313660.805:43): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1184313963.303:44): avc:  denied  { read } for  pid=6152 comm="smtp" name="[9062]" dev=eventpollfs ino=9062 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184313963.303:44): arch=40000003 syscall=11 success=yes exit=0 a0=8164fa20 a1=8164fac0 a2=8164c1a8 a3=1 items=0 ppid=2265 pid=6152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184313963.303:44):  path="eventpoll:[9062]"
>type=AVC msg=audit(1184315141.798:45): avc:  denied  { read } for  pid=6754 comm="smtp" name="[9062]" dev=eventpollfs ino=9062 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184315141.798:45): arch=40000003 syscall=11 success=yes exit=0 a0=8164fa20 a1=8164fac0 a2=8164c1a8 a3=1 items=0 ppid=2265 pid=6754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184315141.798:45):  path="eventpoll:[9062]"
>type=AVC msg=audit(1184315214.298:46): avc:  denied  { read } for  pid=6760 comm="smtp" name="[9062]" dev=eventpollfs ino=9062 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184315214.298:46): arch=40000003 syscall=11 success=yes exit=0 a0=8164fa20 a1=8164fac0 a2=8164c1a8 a3=1 items=0 ppid=2265 pid=6760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184315214.298:46):  path="eventpoll:[9062]"
>type=USER_ACCT msg=audit(1184317261.290:47): user pid=7267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184317261.290:48): user pid=7267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184317261.290:49): login pid=7267 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184317261.290:50): user pid=7267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184317261.290:51): user pid=7267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184317261.290:52): user pid=7267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184320861.275:53): user pid=577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184320861.275:54): user pid=577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184320861.275:55): login pid=577 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184320861.275:56): user pid=577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184320861.275:57): user pid=577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184320861.275:58): user pid=577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184324461.260:59): user pid=773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184324461.260:60): user pid=773 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184324461.260:61): login pid=773 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184324461.760:62): user pid=773 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184324461.760:63): user pid=773 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184324461.760:64): user pid=773 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1184327850.246:65): avc:  denied  { read } for  pid=1236 comm="smtp" name="[9062]" dev=eventpollfs ino=9062 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:system_r:postfix_master_t:s0 tclass=file
>type=SYSCALL msg=audit(1184327850.246:65): arch=40000003 syscall=11 success=yes exit=0 a0=8164fa20 a1=8164fac0 a2=8164c1a8 a3=1 items=0 ppid=2265 pid=1236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1184327850.246:65):  path="eventpoll:[9062]"
>type=AVC msg=audit(1184328039.245:66): avc:  denied  { search } for  pid=1268 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328039.245:66): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5b2c0 a1=bfd5c31c a2=a000 a3=9721a38 items=0 ppid=1267 pid=1268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328040.745:67): avc:  denied  { search } for  pid=1268 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328040.745:67): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5b2c0 a1=bfd5c31c a2=a000 a3=9721a38 items=0 ppid=1267 pid=1268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328041.245:68): avc:  denied  { search } for  pid=1268 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328041.245:68): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5b2c0 a1=bfd5c31c a2=a000 a3=9721a38 items=0 ppid=1267 pid=1268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328043.245:69): avc:  denied  { search } for  pid=1288 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328043.245:69): arch=40000003 syscall=195 success=no exit=-13 a0=bfe265e0 a1=bfe2763c a2=a000 a3=8884a10 items=0 ppid=1287 pid=1288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328043.245:70): avc:  denied  { search } for  pid=1288 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328043.245:70): arch=40000003 syscall=195 success=no exit=-13 a0=bfe265e0 a1=bfe2763c a2=a000 a3=8884a10 items=0 ppid=1287 pid=1288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328043.245:71): avc:  denied  { search } for  pid=1288 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328043.245:71): arch=40000003 syscall=195 success=no exit=-13 a0=bfe265e0 a1=bfe2763c a2=a000 a3=8884a10 items=0 ppid=1287 pid=1288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328048.745:72): avc:  denied  { search } for  pid=1299 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328048.745:72): arch=40000003 syscall=195 success=no exit=-13 a0=bfdba570 a1=bfdbb5cc a2=a000 a3=9eb7a10 items=0 ppid=1095 pid=1299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328048.745:73): avc:  denied  { search } for  pid=1299 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328048.745:73): arch=40000003 syscall=195 success=no exit=-13 a0=bfdba570 a1=bfdbb5cc a2=a000 a3=9eb7a10 items=0 ppid=1095 pid=1299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328048.745:74): avc:  denied  { search } for  pid=1299 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328048.745:74): arch=40000003 syscall=195 success=no exit=-13 a0=bfdba570 a1=bfdbb5cc a2=a000 a3=9eb7a10 items=0 ppid=1095 pid=1299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328049.745:75): avc:  denied  { search } for  pid=1300 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328049.745:75): arch=40000003 syscall=195 success=no exit=-13 a0=bfd18cd0 a1=bfd19d2c a2=a000 a3=920ea10 items=0 ppid=1095 pid=1300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328049.745:76): avc:  denied  { search } for  pid=1300 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328049.745:76): arch=40000003 syscall=195 success=no exit=-13 a0=bfd18cd0 a1=bfd19d2c a2=a000 a3=920ea10 items=0 ppid=1095 pid=1300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328049.745:77): avc:  denied  { search } for  pid=1300 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328049.745:77): arch=40000003 syscall=195 success=no exit=-13 a0=bfd18cd0 a1=bfd19d2c a2=a000 a3=920ea10 items=0 ppid=1095 pid=1300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1184328052.245:78): user pid=1302 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=AVC msg=audit(1184328053.245:79): avc:  denied  { search } for  pid=1304 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328053.245:79): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc60e0 a1=bfdc713c a2=a000 a3=954da10 items=0 ppid=1303 pid=1304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328053.245:80): avc:  denied  { search } for  pid=1304 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328053.245:80): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc60e0 a1=bfdc713c a2=a000 a3=954da10 items=0 ppid=1303 pid=1304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328053.245:81): avc:  denied  { search } for  pid=1304 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328053.245:81): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc60e0 a1=bfdc713c a2=a000 a3=954da10 items=0 ppid=1303 pid=1304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328054.245:82): avc:  denied  { search } for  pid=1307 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328054.245:82): arch=40000003 syscall=195 success=no exit=-13 a0=bfdcdd80 a1=bfdceddc a2=a000 a3=a04aa10 items=0 ppid=1095 pid=1307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328054.245:83): avc:  denied  { search } for  pid=1307 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328054.245:83): arch=40000003 syscall=195 success=no exit=-13 a0=bfdcdd80 a1=bfdceddc a2=a000 a3=a04aa10 items=0 ppid=1095 pid=1307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328054.245:84): avc:  denied  { search } for  pid=1307 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328054.245:84): arch=40000003 syscall=195 success=no exit=-13 a0=bfdcdd80 a1=bfdceddc a2=a000 a3=a04aa10 items=0 ppid=1095 pid=1307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.245:85): avc:  denied  { search } for  pid=1308 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.245:85): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f10a0 a1=bf8f20fc a2=a000 a3=8994a10 items=0 ppid=1095 pid=1308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.245:86): avc:  denied  { search } for  pid=1308 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.245:86): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f10a0 a1=bf8f20fc a2=a000 a3=8994a10 items=0 ppid=1095 pid=1308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.245:87): avc:  denied  { search } for  pid=1308 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.245:87): arch=40000003 syscall=195 success=no exit=-13 a0=bf8f10a0 a1=bf8f20fc a2=a000 a3=8994a10 items=0 ppid=1095 pid=1308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.745:88): avc:  denied  { search } for  pid=1309 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.745:88): arch=40000003 syscall=195 success=no exit=-13 a0=bfdded90 a1=bfddfdec a2=a000 a3=8449a10 items=0 ppid=1095 pid=1309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.745:89): avc:  denied  { search } for  pid=1309 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.745:89): arch=40000003 syscall=195 success=no exit=-13 a0=bfdded90 a1=bfddfdec a2=a000 a3=8449a10 items=0 ppid=1095 pid=1309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328058.745:90): avc:  denied  { search } for  pid=1309 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328058.745:90): arch=40000003 syscall=195 success=no exit=-13 a0=bfdded90 a1=bfddfdec a2=a000 a3=8449a10 items=0 ppid=1095 pid=1309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1184328061.745:91): user pid=1310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184328061.745:92): user pid=1310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184328061.745:93): login pid=1310 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184328061.745:94): user pid=1310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184328062.245:95): user pid=1310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184328062.245:96): user pid=1310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1184328063.245:97): avc:  denied  { search } for  pid=1312 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.245:97): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9e550 a1=bfd9f5ac a2=a000 a3=95d6a10 items=0 ppid=1095 pid=1312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328063.245:98): avc:  denied  { search } for  pid=1312 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.245:98): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9e550 a1=bfd9f5ac a2=a000 a3=95d6a10 items=0 ppid=1095 pid=1312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328063.245:99): avc:  denied  { search } for  pid=1312 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.245:99): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9e550 a1=bfd9f5ac a2=a000 a3=95d6a10 items=0 ppid=1095 pid=1312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328063.745:100): avc:  denied  { search } for  pid=1313 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.745:100): arch=40000003 syscall=195 success=no exit=-13 a0=bfc67410 a1=bfc6846c a2=a000 a3=80fda10 items=0 ppid=1095 pid=1313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328063.745:101): avc:  denied  { search } for  pid=1313 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.745:101): arch=40000003 syscall=195 success=no exit=-13 a0=bfc67410 a1=bfc6846c a2=a000 a3=80fda10 items=0 ppid=1095 pid=1313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328063.745:102): avc:  denied  { search } for  pid=1313 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328063.745:102): arch=40000003 syscall=195 success=no exit=-13 a0=bfc67410 a1=bfc6846c a2=a000 a3=80fda10 items=0 ppid=1095 pid=1313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328064.245:103): avc:  denied  { search } for  pid=1314 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328064.245:103): arch=40000003 syscall=195 success=no exit=-13 a0=bf84a800 a1=bf84b85c a2=a000 a3=a075a10 items=0 ppid=1095 pid=1314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328064.245:104): avc:  denied  { search } for  pid=1314 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328064.245:104): arch=40000003 syscall=195 success=no exit=-13 a0=bf84a800 a1=bf84b85c a2=a000 a3=a075a10 items=0 ppid=1095 pid=1314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328064.245:105): avc:  denied  { search } for  pid=1314 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328064.245:105): arch=40000003 syscall=195 success=no exit=-13 a0=bf84a800 a1=bf84b85c a2=a000 a3=a075a10 items=0 ppid=1095 pid=1314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328065.745:106): avc:  denied  { search } for  pid=1315 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328065.745:106): arch=40000003 syscall=195 success=no exit=-13 a0=bfe54e00 a1=bfe55e5c a2=a000 a3=9115a10 items=0 ppid=1095 pid=1315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328065.745:107): avc:  denied  { search } for  pid=1315 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328065.745:107): arch=40000003 syscall=195 success=no exit=-13 a0=bfe54e00 a1=bfe55e5c a2=a000 a3=9115a10 items=0 ppid=1095 pid=1315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328065.745:108): avc:  denied  { search } for  pid=1315 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328065.745:108): arch=40000003 syscall=195 success=no exit=-13 a0=bfe54e00 a1=bfe55e5c a2=a000 a3=9115a10 items=0 ppid=1095 pid=1315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328067.245:109): avc:  denied  { search } for  pid=1318 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328067.245:109): arch=40000003 syscall=195 success=no exit=-13 a0=bfd044b0 a1=bfd0550c a2=a000 a3=84c5a10 items=0 ppid=1095 pid=1318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328067.245:110): avc:  denied  { search } for  pid=1318 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328067.245:110): arch=40000003 syscall=195 success=no exit=-13 a0=bfd044b0 a1=bfd0550c a2=a000 a3=84c5a10 items=0 ppid=1095 pid=1318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328067.245:111): avc:  denied  { search } for  pid=1318 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328067.245:111): arch=40000003 syscall=195 success=no exit=-13 a0=bfd044b0 a1=bfd0550c a2=a000 a3=84c5a10 items=0 ppid=1095 pid=1318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1184328067.245:112): user pid=1320 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=jackuser exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1184328068.245:113): avc:  denied  { search } for  pid=1322 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328068.245:113): arch=40000003 syscall=195 success=no exit=-13 a0=bfbb3b70 a1=bfbb4bcc a2=a000 a3=8598a10 items=0 ppid=1321 pid=1322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328068.245:114): avc:  denied  { search } for  pid=1322 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328068.245:114): arch=40000003 syscall=195 success=no exit=-13 a0=bfbb3b70 a1=bfbb4bcc a2=a000 a3=8598a10 items=0 ppid=1321 pid=1322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328068.245:115): avc:  denied  { search } for  pid=1322 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328068.245:115): arch=40000003 syscall=195 success=no exit=-13 a0=bfbb3b70 a1=bfbb4bcc a2=a000 a3=8598a10 items=0 ppid=1321 pid=1322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328069.245:116): avc:  denied  { search } for  pid=1325 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328069.245:116): arch=40000003 syscall=195 success=no exit=-13 a0=bfee7690 a1=bfee86ec a2=a000 a3=9c97a10 items=0 ppid=1095 pid=1325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328069.245:117): avc:  denied  { search } for  pid=1325 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328069.245:117): arch=40000003 syscall=195 success=no exit=-13 a0=bfee7690 a1=bfee86ec a2=a000 a3=9c97a10 items=0 ppid=1095 pid=1325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328069.245:118): avc:  denied  { search } for  pid=1325 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328069.245:118): arch=40000003 syscall=195 success=no exit=-13 a0=bfee7690 a1=bfee86ec a2=a000 a3=9c97a10 items=0 ppid=1095 pid=1325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328070.745:119): avc:  denied  { search } for  pid=1326 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328070.745:119): arch=40000003 syscall=195 success=no exit=-13 a0=bfabc270 a1=bfabd2cc a2=a000 a3=8103a10 items=0 ppid=1095 pid=1326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328070.745:120): avc:  denied  { search } for  pid=1326 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328070.745:120): arch=40000003 syscall=195 success=no exit=-13 a0=bfabc270 a1=bfabd2cc a2=a000 a3=8103a10 items=0 ppid=1095 pid=1326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328070.745:121): avc:  denied  { search } for  pid=1326 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328070.745:121): arch=40000003 syscall=195 success=no exit=-13 a0=bfabc270 a1=bfabd2cc a2=a000 a3=8103a10 items=0 ppid=1095 pid=1326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328098.245:122): avc:  denied  { search } for  pid=1342 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328098.245:122): arch=40000003 syscall=195 success=no exit=-13 a0=bfb65ae0 a1=bfb66b3c a2=a000 a3=9813a10 items=0 ppid=1332 pid=1342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328098.245:123): avc:  denied  { search } for  pid=1342 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328098.245:123): arch=40000003 syscall=195 success=no exit=-13 a0=bfb65ae0 a1=bfb66b3c a2=a000 a3=9813a10 items=0 ppid=1332 pid=1342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328098.245:124): avc:  denied  { search } for  pid=1342 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328098.245:124): arch=40000003 syscall=195 success=no exit=-13 a0=bfb65ae0 a1=bfb66b3c a2=a000 a3=9813a10 items=0 ppid=1332 pid=1342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328102.245:125): avc:  denied  { search } for  pid=1343 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328102.245:125): arch=40000003 syscall=195 success=no exit=-13 a0=bfc79c30 a1=bfc7ac8c a2=a000 a3=9270a10 items=0 ppid=1095 pid=1343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328102.245:126): avc:  denied  { search } for  pid=1343 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328102.245:126): arch=40000003 syscall=195 success=no exit=-13 a0=bfc79c30 a1=bfc7ac8c a2=a000 a3=9270a10 items=0 ppid=1095 pid=1343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328102.245:127): avc:  denied  { search } for  pid=1343 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328102.245:127): arch=40000003 syscall=195 success=no exit=-13 a0=bfc79c30 a1=bfc7ac8c a2=a000 a3=9270a10 items=0 ppid=1095 pid=1343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328104.245:128): avc:  denied  { search } for  pid=1348 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328104.245:128): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=9e77a10 items=0 ppid=1095 pid=1348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328104.245:129): avc:  denied  { search } for  pid=1348 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328104.245:129): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=9e77a10 items=0 ppid=1095 pid=1348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328104.245:130): avc:  denied  { search } for  pid=1348 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328104.245:130): arch=40000003 syscall=195 success=no exit=-13 a0=bfa78230 a1=bfa7928c a2=a000 a3=9e77a10 items=0 ppid=1095 pid=1348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328105.745:131): avc:  denied  { search } for  pid=1350 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328105.745:131): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=8459a10 items=0 ppid=1349 pid=1350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328105.745:132): avc:  denied  { search } for  pid=1350 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328105.745:132): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=8459a10 items=0 ppid=1349 pid=1350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328105.745:133): avc:  denied  { search } for  pid=1350 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328105.745:133): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=8459a10 items=0 ppid=1349 pid=1350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328111.245:134): avc:  denied  { search } for  pid=1362 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328111.245:134): arch=40000003 syscall=195 success=no exit=-13 a0=bf97aac0 a1=bf97bb1c a2=a000 a3=8793a10 items=0 ppid=1095 pid=1362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328111.245:135): avc:  denied  { search } for  pid=1362 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328111.245:135): arch=40000003 syscall=195 success=no exit=-13 a0=bf97aac0 a1=bf97bb1c a2=a000 a3=8793a10 items=0 ppid=1095 pid=1362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328111.245:136): avc:  denied  { search } for  pid=1362 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328111.245:136): arch=40000003 syscall=195 success=no exit=-13 a0=bf97aac0 a1=bf97bb1c a2=a000 a3=8793a10 items=0 ppid=1095 pid=1362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1184328112.245:137): user pid=1368 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1184328119.745:138): avc:  denied  { search } for  pid=1371 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328119.745:138): arch=40000003 syscall=195 success=no exit=-13 a0=bff7b730 a1=bff7c78c a2=a000 a3=9f7fa10 items=0 ppid=1369 pid=1371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328119.745:139): avc:  denied  { search } for  pid=1371 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328119.745:139): arch=40000003 syscall=195 success=no exit=-13 a0=bff7b730 a1=bff7c78c a2=a000 a3=9f7fa10 items=0 ppid=1369 pid=1371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328119.745:140): avc:  denied  { search } for  pid=1371 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328119.745:140): arch=40000003 syscall=195 success=no exit=-13 a0=bff7b730 a1=bff7c78c a2=a000 a3=9f7fa10 items=0 ppid=1369 pid=1371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1184328145.245:141): user pid=1414 uid=0 auid=500 subj=user_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1184328161.245:142): avc:  denied  { search } for  pid=1421 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328161.245:142): arch=40000003 syscall=195 success=no exit=-13 a0=bfdfadb0 a1=bfdfbe0c a2=a000 a3=9b1da10 items=0 ppid=1095 pid=1421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328161.245:143): avc:  denied  { search } for  pid=1421 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328161.245:143): arch=40000003 syscall=195 success=no exit=-13 a0=bfdfadb0 a1=bfdfbe0c a2=a000 a3=9b1da10 items=0 ppid=1095 pid=1421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328161.245:144): avc:  denied  { search } for  pid=1421 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328161.245:144): arch=40000003 syscall=195 success=no exit=-13 a0=bfdfadb0 a1=bfdfbe0c a2=a000 a3=9b1da10 items=0 ppid=1095 pid=1421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328181.245:145): avc:  denied  { search } for  pid=1471 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328181.245:145): arch=40000003 syscall=195 success=no exit=-13 a0=bfca9120 a1=bfcaa17c a2=a000 a3=96d1a10 items=0 ppid=1095 pid=1471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328181.245:146): avc:  denied  { search } for  pid=1471 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328181.245:146): arch=40000003 syscall=195 success=no exit=-13 a0=bfca9120 a1=bfcaa17c a2=a000 a3=96d1a10 items=0 ppid=1095 pid=1471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328181.245:147): avc:  denied  { search } for  pid=1471 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328181.245:147): arch=40000003 syscall=195 success=no exit=-13 a0=bfca9120 a1=bfcaa17c a2=a000 a3=96d1a10 items=0 ppid=1095 pid=1471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328183.745:148): avc:  denied  { search } for  pid=1473 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328183.745:148): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bb970 a1=bf9bc9cc a2=a000 a3=9bcda10 items=0 ppid=1095 pid=1473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328183.745:149): avc:  denied  { search } for  pid=1473 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328183.745:149): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bb970 a1=bf9bc9cc a2=a000 a3=9bcda10 items=0 ppid=1095 pid=1473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328183.745:150): avc:  denied  { search } for  pid=1473 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328183.745:150): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bb970 a1=bf9bc9cc a2=a000 a3=9bcda10 items=0 ppid=1095 pid=1473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328200.244:151): avc:  denied  { search } for  pid=1475 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328200.244:151): arch=40000003 syscall=195 success=no exit=-13 a0=bfb40af0 a1=bfb41b4c a2=a000 a3=8153a10 items=0 ppid=1474 pid=1475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328200.244:152): avc:  denied  { search } for  pid=1475 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328200.244:152): arch=40000003 syscall=195 success=no exit=-13 a0=bfb40af0 a1=bfb41b4c a2=a000 a3=8153a10 items=0 ppid=1474 pid=1475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328200.244:153): avc:  denied  { search } for  pid=1475 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328200.244:153): arch=40000003 syscall=195 success=no exit=-13 a0=bfb40af0 a1=bfb41b4c a2=a000 a3=8153a10 items=0 ppid=1474 pid=1475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328268.244:154): avc:  denied  { search } for  pid=1918 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328268.244:154): arch=40000003 syscall=195 success=no exit=-13 a0=bf946100 a1=bf94715c a2=a000 a3=8b0ca10 items=0 ppid=1917 pid=1918 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328268.244:155): avc:  denied  { search } for  pid=1918 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328268.244:155): arch=40000003 syscall=195 success=no exit=-13 a0=bf946100 a1=bf94715c a2=a000 a3=8b0ca10 items=0 ppid=1917 pid=1918 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328268.244:156): avc:  denied  { search } for  pid=1918 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328268.244:156): arch=40000003 syscall=195 success=no exit=-13 a0=bf946100 a1=bf94715c a2=a000 a3=8b0ca10 items=0 ppid=1917 pid=1918 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328279.244:157): avc:  denied  { search } for  pid=1922 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328279.244:157): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=990aa10 items=0 ppid=1095 pid=1922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328279.244:158): avc:  denied  { search } for  pid=1922 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328279.244:158): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=990aa10 items=0 ppid=1095 pid=1922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328279.244:159): avc:  denied  { search } for  pid=1922 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328279.244:159): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=990aa10 items=0 ppid=1095 pid=1922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328286.744:160): avc:  denied  { search } for  pid=1923 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328286.744:160): arch=40000003 syscall=195 success=no exit=-13 a0=bfc88440 a1=bfc8949c a2=a000 a3=9f23a10 items=0 ppid=1095 pid=1923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328286.744:161): avc:  denied  { search } for  pid=1923 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328286.744:161): arch=40000003 syscall=195 success=no exit=-13 a0=bfc88440 a1=bfc8949c a2=a000 a3=9f23a10 items=0 ppid=1095 pid=1923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328286.744:162): avc:  denied  { search } for  pid=1923 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328286.744:162): arch=40000003 syscall=195 success=no exit=-13 a0=bfc88440 a1=bfc8949c a2=a000 a3=9f23a10 items=0 ppid=1095 pid=1923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328290.244:163): avc:  denied  { search } for  pid=1924 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328290.244:163): arch=40000003 syscall=195 success=no exit=-13 a0=bffbb770 a1=bffbc7cc a2=a000 a3=9252a10 items=0 ppid=1095 pid=1924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328290.244:164): avc:  denied  { search } for  pid=1924 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328290.244:164): arch=40000003 syscall=195 success=no exit=-13 a0=bffbb770 a1=bffbc7cc a2=a000 a3=9252a10 items=0 ppid=1095 pid=1924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328290.244:165): avc:  denied  { search } for  pid=1924 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328290.244:165): arch=40000003 syscall=195 success=no exit=-13 a0=bffbb770 a1=bffbc7cc a2=a000 a3=9252a10 items=0 ppid=1095 pid=1924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328291.244:166): avc:  denied  { search } for  pid=1925 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328291.244:166): arch=40000003 syscall=195 success=no exit=-13 a0=bf93f0f0 a1=bf94014c a2=a000 a3=9734a10 items=0 ppid=1095 pid=1925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328291.244:167): avc:  denied  { search } for  pid=1925 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328291.244:167): arch=40000003 syscall=195 success=no exit=-13 a0=bf93f0f0 a1=bf94014c a2=a000 a3=9734a10 items=0 ppid=1095 pid=1925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328291.244:168): avc:  denied  { search } for  pid=1925 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328291.244:168): arch=40000003 syscall=195 success=no exit=-13 a0=bf93f0f0 a1=bf94014c a2=a000 a3=9734a10 items=0 ppid=1095 pid=1925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328292.744:169): avc:  denied  { search } for  pid=1926 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328292.744:169): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=8faca10 items=0 ppid=1095 pid=1926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328292.744:170): avc:  denied  { search } for  pid=1926 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328292.744:170): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=8faca10 items=0 ppid=1095 pid=1926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328292.744:171): avc:  denied  { search } for  pid=1926 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328292.744:171): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fb9b0 a1=bf9fca0c a2=a000 a3=8faca10 items=0 ppid=1095 pid=1926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328349.244:172): avc:  denied  { search } for  pid=1942 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328349.244:172): arch=40000003 syscall=195 success=no exit=-13 a0=bfd26150 a1=bfd271ac a2=a000 a3=a059a10 items=0 ppid=1941 pid=1942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328350.244:173): avc:  denied  { search } for  pid=1942 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328350.244:173): arch=40000003 syscall=195 success=no exit=-13 a0=bfd26150 a1=bfd271ac a2=a000 a3=a059a10 items=0 ppid=1941 pid=1942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328350.744:174): avc:  denied  { search } for  pid=1942 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328350.744:174): arch=40000003 syscall=195 success=no exit=-13 a0=bfd26150 a1=bfd271ac a2=a000 a3=a059a10 items=0 ppid=1941 pid=1942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328400.744:175): avc:  denied  { search } for  pid=2039 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328400.744:175): arch=40000003 syscall=195 success=no exit=-13 a0=bfede280 a1=bfedf2dc a2=a000 a3=868ca10 items=0 ppid=1095 pid=2039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328400.744:176): avc:  denied  { search } for  pid=2039 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328400.744:176): arch=40000003 syscall=195 success=no exit=-13 a0=bfede280 a1=bfedf2dc a2=a000 a3=868ca10 items=0 ppid=1095 pid=2039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328400.744:177): avc:  denied  { search } for  pid=2039 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328400.744:177): arch=40000003 syscall=195 success=no exit=-13 a0=bfede280 a1=bfedf2dc a2=a000 a3=868ca10 items=0 ppid=1095 pid=2039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1184328424.744:178): user pid=2113 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=ntp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1184328424.744:179): user pid=2115 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=ntp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=USER_AVC msg=audit(1184328445.243:180): user pid=3507 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1184328445.243:181): user pid=2102 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1184328444.743:182): policy loaded auid=500
>type=SYSCALL msg=audit(1184328444.743:182): arch=40000003 syscall=4 success=yes exit=1559586 a0=4 a1=b7e47000 a2=17cc22 a3=bfda0b08 items=0 ppid=2123 pid=2124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1184328453.243:183): user pid=2250 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1184328468.743:184): user pid=2433 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/4 res=failed)'
>type=AVC msg=audit(1184328488.243:185): avc:  denied  { search } for  pid=2438 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328488.243:185): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fbf40 a1=bf8fcf9c a2=a000 a3=9319a10 items=0 ppid=1095 pid=2438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328489.243:186): avc:  denied  { search } for  pid=2438 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328489.243:186): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fbf40 a1=bf8fcf9c a2=a000 a3=9319a10 items=0 ppid=1095 pid=2438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328489.243:187): avc:  denied  { search } for  pid=2438 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328489.243:187): arch=40000003 syscall=195 success=no exit=-13 a0=bf8fbf40 a1=bf8fcf9c a2=a000 a3=9319a10 items=0 ppid=1095 pid=2438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328507.743:188): avc:  denied  { search } for  pid=2444 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328507.743:188): arch=40000003 syscall=195 success=no exit=-13 a0=bfb142c0 a1=bfb1531c a2=a000 a3=8519a10 items=0 ppid=2443 pid=2444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328507.743:189): avc:  denied  { search } for  pid=2444 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328507.743:189): arch=40000003 syscall=195 success=no exit=-13 a0=bfb142c0 a1=bfb1531c a2=a000 a3=8519a10 items=0 ppid=2443 pid=2444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328507.743:190): avc:  denied  { search } for  pid=2444 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328507.743:190): arch=40000003 syscall=195 success=no exit=-13 a0=bfb142c0 a1=bfb1531c a2=a000 a3=8519a10 items=0 ppid=2443 pid=2444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328521.743:191): avc:  denied  { search } for  pid=2450 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328521.743:191): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9cd50 a1=bfd9ddac a2=a000 a3=9391a10 items=0 ppid=2449 pid=2450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328521.743:192): avc:  denied  { search } for  pid=2450 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328521.743:192): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9cd50 a1=bfd9ddac a2=a000 a3=9391a10 items=0 ppid=2449 pid=2450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328521.743:193): avc:  denied  { search } for  pid=2450 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328521.743:193): arch=40000003 syscall=195 success=no exit=-13 a0=bfd9cd50 a1=bfd9ddac a2=a000 a3=9391a10 items=0 ppid=2449 pid=2450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328608.743:194): avc:  denied  { search } for  pid=2686 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328608.743:194): arch=40000003 syscall=195 success=no exit=-13 a0=bf8cf880 a1=bf8d08dc a2=a000 a3=8a9fa10 items=0 ppid=1095 pid=2686 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328608.743:195): avc:  denied  { search } for  pid=2686 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328608.743:195): arch=40000003 syscall=195 success=no exit=-13 a0=bf8cf880 a1=bf8d08dc a2=a000 a3=8a9fa10 items=0 ppid=1095 pid=2686 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328608.743:196): avc:  denied  { search } for  pid=2686 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328608.743:196): arch=40000003 syscall=195 success=no exit=-13 a0=bf8cf880 a1=bf8d08dc a2=a000 a3=8a9fa10 items=0 ppid=1095 pid=2686 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328613.743:197): avc:  denied  { search } for  pid=2690 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328613.743:197): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc180 a1=bf9cd1dc a2=a000 a3=9194a10 items=0 ppid=1095 pid=2690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328613.743:198): avc:  denied  { search } for  pid=2690 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328613.743:198): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc180 a1=bf9cd1dc a2=a000 a3=9194a10 items=0 ppid=1095 pid=2690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328613.743:199): avc:  denied  { search } for  pid=2690 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328613.743:199): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc180 a1=bf9cd1dc a2=a000 a3=9194a10 items=0 ppid=1095 pid=2690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328617.743:200): avc:  denied  { search } for  pid=2694 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328617.743:200): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=8709a10 items=0 ppid=2693 pid=2694 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328617.743:201): avc:  denied  { search } for  pid=2694 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328617.743:201): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=8709a10 items=0 ppid=2693 pid=2694 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328617.743:202): avc:  denied  { search } for  pid=2694 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328617.743:202): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=8709a10 items=0 ppid=2693 pid=2694 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328622.243:203): avc:  denied  { search } for  pid=2701 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328622.243:203): arch=40000003 syscall=195 success=no exit=-13 a0=bf98d140 a1=bf98e19c a2=a000 a3=9a37a10 items=0 ppid=1095 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328622.243:204): avc:  denied  { search } for  pid=2701 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328622.243:204): arch=40000003 syscall=195 success=no exit=-13 a0=bf98d140 a1=bf98e19c a2=a000 a3=9a37a10 items=0 ppid=1095 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328622.243:205): avc:  denied  { search } for  pid=2701 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328622.243:205): arch=40000003 syscall=195 success=no exit=-13 a0=bf98d140 a1=bf98e19c a2=a000 a3=9a37a10 items=0 ppid=1095 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328625.743:206): avc:  denied  { search } for  pid=2708 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328625.743:206): arch=40000003 syscall=195 success=no exit=-13 a0=bfa0d850 a1=bfa0e8ac a2=a000 a3=9a6ba10 items=0 ppid=1095 pid=2708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328625.743:207): avc:  denied  { search } for  pid=2708 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328625.743:207): arch=40000003 syscall=195 success=no exit=-13 a0=bfa0d850 a1=bfa0e8ac a2=a000 a3=9a6ba10 items=0 ppid=1095 pid=2708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328625.743:208): avc:  denied  { search } for  pid=2708 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328625.743:208): arch=40000003 syscall=195 success=no exit=-13 a0=bfa0d850 a1=bfa0e8ac a2=a000 a3=9a6ba10 items=0 ppid=1095 pid=2708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328628.743:209): avc:  denied  { search } for  pid=2710 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328628.743:209): arch=40000003 syscall=195 success=no exit=-13 a0=bffc7770 a1=bffc87cc a2=a000 a3=a047a10 items=0 ppid=1095 pid=2710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328628.743:210): avc:  denied  { search } for  pid=2710 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328628.743:210): arch=40000003 syscall=195 success=no exit=-13 a0=bffc7770 a1=bffc87cc a2=a000 a3=a047a10 items=0 ppid=1095 pid=2710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328628.743:211): avc:  denied  { search } for  pid=2710 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328628.743:211): arch=40000003 syscall=195 success=no exit=-13 a0=bffc7770 a1=bffc87cc a2=a000 a3=a047a10 items=0 ppid=1095 pid=2710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328634.743:212): avc:  denied  { search } for  pid=2715 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328634.743:212): arch=40000003 syscall=195 success=no exit=-13 a0=bff18ed0 a1=bff19f2c a2=a000 a3=8ca3a10 items=0 ppid=1095 pid=2715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328634.743:213): avc:  denied  { search } for  pid=2715 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328634.743:213): arch=40000003 syscall=195 success=no exit=-13 a0=bff18ed0 a1=bff19f2c a2=a000 a3=8ca3a10 items=0 ppid=1095 pid=2715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328634.743:214): avc:  denied  { search } for  pid=2715 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328634.743:214): arch=40000003 syscall=195 success=no exit=-13 a0=bff18ed0 a1=bff19f2c a2=a000 a3=8ca3a10 items=0 ppid=1095 pid=2715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328635.743:215): avc:  denied  { search } for  pid=2718 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328635.743:215): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=89c9a10 items=0 ppid=2717 pid=2718 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328635.743:216): avc:  denied  { search } for  pid=2718 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328635.743:216): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=89c9a10 items=0 ppid=2717 pid=2718 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328635.743:217): avc:  denied  { search } for  pid=2718 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328635.743:217): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dd990 a1=bf9de9ec a2=a000 a3=89c9a10 items=0 ppid=2717 pid=2718 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328640.243:218): avc:  denied  { search } for  pid=2721 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328640.243:218): arch=40000003 syscall=195 success=no exit=-13 a0=bfac9280 a1=bfaca2dc a2=a000 a3=9829a10 items=0 ppid=2720 pid=2721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328640.243:219): avc:  denied  { search } for  pid=2721 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328640.243:219): arch=40000003 syscall=195 success=no exit=-13 a0=bfac9280 a1=bfaca2dc a2=a000 a3=9829a10 items=0 ppid=2720 pid=2721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328640.243:220): avc:  denied  { search } for  pid=2721 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328640.243:220): arch=40000003 syscall=195 success=no exit=-13 a0=bfac9280 a1=bfaca2dc a2=a000 a3=9829a10 items=0 ppid=2720 pid=2721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328649.243:221): avc:  denied  { search } for  pid=2749 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328649.243:221): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7ca30 a1=bfa7da8c a2=a000 a3=98a7a10 items=0 ppid=1095 pid=2749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328649.243:222): avc:  denied  { search } for  pid=2749 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328649.243:222): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7ca30 a1=bfa7da8c a2=a000 a3=98a7a10 items=0 ppid=1095 pid=2749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328649.243:223): avc:  denied  { search } for  pid=2749 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328649.243:223): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7ca30 a1=bfa7da8c a2=a000 a3=98a7a10 items=0 ppid=1095 pid=2749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328656.743:224): avc:  denied  { search } for  pid=2788 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328656.743:224): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9c250 a1=bfa9d2ac a2=a000 a3=94eaa10 items=0 ppid=1095 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328656.743:225): avc:  denied  { search } for  pid=2788 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328656.743:225): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9c250 a1=bfa9d2ac a2=a000 a3=94eaa10 items=0 ppid=1095 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328656.743:226): avc:  denied  { search } for  pid=2788 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328656.743:226): arch=40000003 syscall=195 success=no exit=-13 a0=bfa9c250 a1=bfa9d2ac a2=a000 a3=94eaa10 items=0 ppid=1095 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328661.243:227): avc:  denied  { search } for  pid=2793 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328661.243:227): arch=40000003 syscall=195 success=no exit=-13 a0=bfadf290 a1=bfae02ec a2=a000 a3=89aaa10 items=0 ppid=1095 pid=2793 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328661.243:228): avc:  denied  { search } for  pid=2793 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328661.243:228): arch=40000003 syscall=195 success=no exit=-13 a0=bfadf290 a1=bfae02ec a2=a000 a3=89aaa10 items=0 ppid=1095 pid=2793 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328661.243:229): avc:  denied  { search } for  pid=2793 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328661.243:229): arch=40000003 syscall=195 success=no exit=-13 a0=bfadf290 a1=bfae02ec a2=a000 a3=89aaa10 items=0 ppid=1095 pid=2793 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328672.243:230): avc:  denied  { search } for  pid=2809 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328672.243:230): arch=40000003 syscall=195 success=no exit=-13 a0=bf8067c0 a1=bf80781c a2=a000 a3=94a9a10 items=0 ppid=1095 pid=2809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328672.243:231): avc:  denied  { search } for  pid=2809 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328672.243:231): arch=40000003 syscall=195 success=no exit=-13 a0=bf8067c0 a1=bf80781c a2=a000 a3=94a9a10 items=0 ppid=1095 pid=2809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328672.243:232): avc:  denied  { search } for  pid=2809 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328672.243:232): arch=40000003 syscall=195 success=no exit=-13 a0=bf8067c0 a1=bf80781c a2=a000 a3=94a9a10 items=0 ppid=1095 pid=2809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328678.243:233): avc:  denied  { search } for  pid=2811 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328678.243:233): arch=40000003 syscall=195 success=no exit=-13 a0=bfc39bf0 a1=bfc3ac4c a2=a000 a3=957fa10 items=0 ppid=1095 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328678.243:234): avc:  denied  { search } for  pid=2811 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328678.243:234): arch=40000003 syscall=195 success=no exit=-13 a0=bfc39bf0 a1=bfc3ac4c a2=a000 a3=957fa10 items=0 ppid=1095 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328678.243:235): avc:  denied  { search } for  pid=2811 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328678.243:235): arch=40000003 syscall=195 success=no exit=-13 a0=bfc39bf0 a1=bfc3ac4c a2=a000 a3=957fa10 items=0 ppid=1095 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328682.743:236): avc:  denied  { search } for  pid=2817 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328682.743:236): arch=40000003 syscall=195 success=no exit=-13 a0=bfd474f0 a1=bfd4854c a2=a000 a3=9e09a10 items=0 ppid=1095 pid=2817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328682.743:237): avc:  denied  { search } for  pid=2817 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328682.743:237): arch=40000003 syscall=195 success=no exit=-13 a0=bfd474f0 a1=bfd4854c a2=a000 a3=9e09a10 items=0 ppid=1095 pid=2817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328682.743:238): avc:  denied  { search } for  pid=2817 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328682.743:238): arch=40000003 syscall=195 success=no exit=-13 a0=bfd474f0 a1=bfd4854c a2=a000 a3=9e09a10 items=0 ppid=1095 pid=2817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328685.243:239): avc:  denied  { search } for  pid=2820 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328685.243:239): arch=40000003 syscall=195 success=no exit=-13 a0=bf806fc0 a1=bf80801c a2=a000 a3=81e2a10 items=0 ppid=2819 pid=2820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328685.243:240): avc:  denied  { search } for  pid=2820 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328685.243:240): arch=40000003 syscall=195 success=no exit=-13 a0=bf806fc0 a1=bf80801c a2=a000 a3=81e2a10 items=0 ppid=2819 pid=2820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328685.243:241): avc:  denied  { search } for  pid=2820 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328685.243:241): arch=40000003 syscall=195 success=no exit=-13 a0=bf806fc0 a1=bf80801c a2=a000 a3=81e2a10 items=0 ppid=2819 pid=2820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328689.242:242): avc:  denied  { search } for  pid=2824 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328689.242:242): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dc190 a1=bf9dd1ec a2=a000 a3=9fd7a10 items=0 ppid=1095 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328689.742:243): avc:  denied  { search } for  pid=2824 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328689.742:243): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dc190 a1=bf9dd1ec a2=a000 a3=9fd7a10 items=0 ppid=1095 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328689.742:244): avc:  denied  { search } for  pid=2824 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328689.742:244): arch=40000003 syscall=195 success=no exit=-13 a0=bf9dc190 a1=bf9dd1ec a2=a000 a3=9fd7a10 items=0 ppid=1095 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.242:245): avc:  denied  { search } for  pid=2853 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.242:245): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdb490 a1=bfcdc4ec a2=a000 a3=8860a10 items=0 ppid=2852 pid=2853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.242:246): avc:  denied  { search } for  pid=2853 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.242:246): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdb490 a1=bfcdc4ec a2=a000 a3=8860a10 items=0 ppid=2852 pid=2853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.242:247): avc:  denied  { search } for  pid=2853 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.242:247): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdb490 a1=bfcdc4ec a2=a000 a3=8860a10 items=0 ppid=2852 pid=2853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.742:248): avc:  denied  { search } for  pid=2856 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.742:248): arch=40000003 syscall=195 success=no exit=-13 a0=bfcabc60 a1=bfcaccbc a2=a000 a3=8bb8a10 items=0 ppid=2855 pid=2856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.742:249): avc:  denied  { search } for  pid=2856 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.742:249): arch=40000003 syscall=195 success=no exit=-13 a0=bfcabc60 a1=bfcaccbc a2=a000 a3=8bb8a10 items=0 ppid=2855 pid=2856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328701.742:250): avc:  denied  { search } for  pid=2856 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328701.742:250): arch=40000003 syscall=195 success=no exit=-13 a0=bfcabc60 a1=bfcaccbc a2=a000 a3=8bb8a10 items=0 ppid=2855 pid=2856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328707.242:251): avc:  denied  { search } for  pid=2865 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328707.242:251): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc1c70 a1=bfcc2ccc a2=a000 a3=912da10 items=0 ppid=1095 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328707.242:252): avc:  denied  { search } for  pid=2865 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328707.242:252): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc1c70 a1=bfcc2ccc a2=a000 a3=912da10 items=0 ppid=1095 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328707.242:253): avc:  denied  { search } for  pid=2865 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328707.242:253): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc1c70 a1=bfcc2ccc a2=a000 a3=912da10 items=0 ppid=1095 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1184328716.242:254): user pid=2888 uid=0 auid=500 subj=user_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1184328718.242:255): avc:  denied  { search } for  pid=2891 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328718.242:255): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=9f2ba10 items=0 ppid=1095 pid=2891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328718.242:256): avc:  denied  { search } for  pid=2891 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328718.242:256): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=9f2ba10 items=0 ppid=1095 pid=2891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328718.242:257): avc:  denied  { search } for  pid=2891 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328718.242:257): arch=40000003 syscall=195 success=no exit=-13 a0=bffbcf70 a1=bffbdfcc a2=a000 a3=9f2ba10 items=0 ppid=1095 pid=2891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328725.742:258): avc:  denied  { search } for  pid=2909 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328725.742:258): arch=40000003 syscall=195 success=no exit=-13 a0=bf848800 a1=bf84985c a2=a000 a3=88b1a10 items=0 ppid=1095 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328725.742:259): avc:  denied  { search } for  pid=2909 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328725.742:259): arch=40000003 syscall=195 success=no exit=-13 a0=bf848800 a1=bf84985c a2=a000 a3=88b1a10 items=0 ppid=1095 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328725.742:260): avc:  denied  { search } for  pid=2909 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328725.742:260): arch=40000003 syscall=195 success=no exit=-13 a0=bf848800 a1=bf84985c a2=a000 a3=88b1a10 items=0 ppid=1095 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328728.742:261): avc:  denied  { search } for  pid=2914 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328728.742:261): arch=40000003 syscall=195 success=no exit=-13 a0=bff176d0 a1=bff1872c a2=a000 a3=9974a10 items=0 ppid=1095 pid=2914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328728.742:262): avc:  denied  { search } for  pid=2914 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328728.742:262): arch=40000003 syscall=195 success=no exit=-13 a0=bff176d0 a1=bff1872c a2=a000 a3=9974a10 items=0 ppid=1095 pid=2914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328728.742:263): avc:  denied  { search } for  pid=2914 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328728.742:263): arch=40000003 syscall=195 success=no exit=-13 a0=bff176d0 a1=bff1872c a2=a000 a3=9974a10 items=0 ppid=1095 pid=2914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328734.742:264): avc:  denied  { search } for  pid=2923 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328734.742:264): arch=40000003 syscall=195 success=no exit=-13 a0=bfebbe70 a1=bfebcecc a2=a000 a3=9d5ba10 items=0 ppid=1095 pid=2923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328734.742:265): avc:  denied  { search } for  pid=2923 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328734.742:265): arch=40000003 syscall=195 success=no exit=-13 a0=bfebbe70 a1=bfebcecc a2=a000 a3=9d5ba10 items=0 ppid=1095 pid=2923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328734.742:266): avc:  denied  { search } for  pid=2923 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328734.742:266): arch=40000003 syscall=195 success=no exit=-13 a0=bfebbe70 a1=bfebcecc a2=a000 a3=9d5ba10 items=0 ppid=1095 pid=2923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328737.742:267): avc:  denied  { search } for  pid=2927 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328737.742:267): arch=40000003 syscall=195 success=no exit=-13 a0=bf8a9060 a1=bf8aa0bc a2=a000 a3=8c43a10 items=0 ppid=2924 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328737.742:268): avc:  denied  { search } for  pid=2927 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328737.742:268): arch=40000003 syscall=195 success=no exit=-13 a0=bf8a9060 a1=bf8aa0bc a2=a000 a3=8c43a10 items=0 ppid=2924 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184328737.742:269): avc:  denied  { search } for  pid=2927 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184328737.742:269): arch=40000003 syscall=195 success=no exit=-13 a0=bf8a9060 a1=bf8aa0bc a2=a000 a3=8c43a10 items=0 ppid=2924 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1184331661.227:270): user pid=3032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184331661.227:271): user pid=3032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184331661.227:272): login pid=3032 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184331661.227:273): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184331661.227:274): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184331661.227:275): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184335261.209:276): user pid=3253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184335261.209:277): user pid=3253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184335261.209:278): login pid=3253 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184335261.209:279): user pid=3253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184335261.209:280): user pid=3253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184335261.209:281): user pid=3253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184338717.194:282): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1184338717.194:283): user pid=3446 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1184338861.194:284): user pid=3590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184338861.194:285): user pid=3590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184338861.194:286): login pid=3590 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184338861.194:287): user pid=3590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184338861.194:288): user pid=3590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184338861.194:289): user pid=3590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184342461.680:290): user pid=3891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184342461.680:291): user pid=3891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184342461.680:292): login pid=3891 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184342461.680:293): user pid=3891 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184342461.680:294): user pid=3891 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184342461.680:295): user pid=3891 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184344340.673:296): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1184344340.673:297): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1184344348.173:298): avc:  denied  { write } for  pid=4629 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1184344348.173:298): arch=40000003 syscall=22 success=yes exit=0 a0=95b3320 a1=bfc76520 a2=95b3330 a3=95b3321 items=0 ppid=4619 pid=4629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1184344396.781:8965) auditd normal halt, sending auid=4294967295 pid=4710 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2030
>type=DAEMON_START msg=audit(1184755103.558:348) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2018 res=success, auditd pid=2018
>type=CONFIG_CHANGE msg=audit(1184755103.428:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184755103.428:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1184755103.428:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1184755103.428:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1184755110.427:9): user pid=2184 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1184755130.926:10): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1184755144.426:11): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1184755144.426:12): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1184755144.426:13): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1184755144.426:14): login pid=2743 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1184755144.426:15): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1184755144.426:16): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1184755195.926:17): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1184755195.926:18): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1184755195.926:19): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1184755195.926:20): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1184755253.926:21): avc:  denied  { search } for  pid=3456 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755253.926:21): arch=40000003 syscall=195 success=no exit=-13 a0=bfc82840 a1=bfc8389c a2=a000 a3=9f9aa10 items=0 ppid=3455 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755254.926:22): avc:  denied  { search } for  pid=3456 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755254.926:22): arch=40000003 syscall=195 success=no exit=-13 a0=bfc82840 a1=bfc8389c a2=a000 a3=9f9aa10 items=0 ppid=3455 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755255.426:23): avc:  denied  { search } for  pid=3456 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755255.426:23): arch=40000003 syscall=195 success=no exit=-13 a0=bfc82840 a1=bfc8389c a2=a000 a3=9f9aa10 items=0 ppid=3455 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755264.926:24): avc:  denied  { search } for  pid=3462 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755264.926:24): arch=40000003 syscall=195 success=no exit=-13 a0=bfab9a70 a1=bfabaacc a2=a000 a3=95e4a10 items=0 ppid=3306 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755264.926:25): avc:  denied  { search } for  pid=3462 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755264.926:25): arch=40000003 syscall=195 success=no exit=-13 a0=bfab9a70 a1=bfabaacc a2=a000 a3=95e4a10 items=0 ppid=3306 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755264.926:26): avc:  denied  { search } for  pid=3462 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755264.926:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfab9a70 a1=bfabaacc a2=a000 a3=95e4a10 items=0 ppid=3306 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755271.926:27): avc:  denied  { search } for  pid=3464 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755271.926:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfa359e0 a1=bfa36a3c a2=a000 a3=82aba10 items=0 ppid=3306 pid=3464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755271.926:28): avc:  denied  { search } for  pid=3464 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755271.926:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfa359e0 a1=bfa36a3c a2=a000 a3=82aba10 items=0 ppid=3306 pid=3464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755271.926:29): avc:  denied  { search } for  pid=3464 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755271.926:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfa359e0 a1=bfa36a3c a2=a000 a3=82aba10 items=0 ppid=3306 pid=3464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755293.926:30): avc:  denied  { search } for  pid=3471 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755293.926:30): arch=40000003 syscall=195 success=no exit=-13 a0=bf85f810 a1=bf86086c a2=a000 a3=9628a10 items=0 ppid=3470 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755293.926:31): avc:  denied  { search } for  pid=3471 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755293.926:31): arch=40000003 syscall=195 success=no exit=-13 a0=bf85f810 a1=bf86086c a2=a000 a3=9628a10 items=0 ppid=3470 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755293.926:32): avc:  denied  { search } for  pid=3471 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755293.926:32): arch=40000003 syscall=195 success=no exit=-13 a0=bf85f810 a1=bf86086c a2=a000 a3=9628a10 items=0 ppid=3470 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1184755337.925:33): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1184755337.925:34): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1184755337.925:35): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1184755337.925:36): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1184755341.425:37): avc:  denied  { search } for  pid=3592 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.425:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfc2e3e0 a1=bfc2f43c a2=a000 a3=962ca10 items=0 ppid=3306 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755341.425:38): avc:  denied  { search } for  pid=3592 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.425:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfc2e3e0 a1=bfc2f43c a2=a000 a3=962ca10 items=0 ppid=3306 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755341.425:39): avc:  denied  { search } for  pid=3592 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.425:39): arch=40000003 syscall=195 success=no exit=-13 a0=bfc2e3e0 a1=bfc2f43c a2=a000 a3=962ca10 items=0 ppid=3306 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755341.925:40): avc:  denied  { search } for  pid=3593 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.925:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=8e62a10 items=0 ppid=3306 pid=3593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755341.925:41): avc:  denied  { search } for  pid=3593 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.925:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=8e62a10 items=0 ppid=3306 pid=3593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755341.925:42): avc:  denied  { search } for  pid=3593 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755341.925:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=8e62a10 items=0 ppid=3306 pid=3593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755351.425:43): avc:  denied  { search } for  pid=3601 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755351.425:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaca60 a1=bfaadabc a2=a000 a3=8618a10 items=0 ppid=3306 pid=3601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755351.425:44): avc:  denied  { search } for  pid=3601 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755351.425:44): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaca60 a1=bfaadabc a2=a000 a3=8618a10 items=0 ppid=3306 pid=3601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755351.425:45): avc:  denied  { search } for  pid=3601 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755351.425:45): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaca60 a1=bfaadabc a2=a000 a3=8618a10 items=0 ppid=3306 pid=3601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755352.425:46): avc:  denied  { search } for  pid=3603 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755352.425:46): arch=40000003 syscall=195 success=no exit=-13 a0=bfef1ea0 a1=bfef2efc a2=a000 a3=94fea10 items=0 ppid=3602 pid=3603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755352.425:47): avc:  denied  { search } for  pid=3603 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755352.425:47): arch=40000003 syscall=195 success=no exit=-13 a0=bfef1ea0 a1=bfef2efc a2=a000 a3=94fea10 items=0 ppid=3602 pid=3603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755352.425:48): avc:  denied  { search } for  pid=3603 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755352.425:48): arch=40000003 syscall=195 success=no exit=-13 a0=bfef1ea0 a1=bfef2efc a2=a000 a3=94fea10 items=0 ppid=3602 pid=3603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755354.925:49): avc:  denied  { search } for  pid=3610 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755354.925:49): arch=40000003 syscall=195 success=no exit=-13 a0=bf8007b0 a1=bf80180c a2=a000 a3=88e7a10 items=0 ppid=3609 pid=3610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755354.925:50): avc:  denied  { search } for  pid=3610 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755354.925:50): arch=40000003 syscall=195 success=no exit=-13 a0=bf8007b0 a1=bf80180c a2=a000 a3=88e7a10 items=0 ppid=3609 pid=3610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755354.925:51): avc:  denied  { search } for  pid=3610 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755354.925:51): arch=40000003 syscall=195 success=no exit=-13 a0=bf8007b0 a1=bf80180c a2=a000 a3=88e7a10 items=0 ppid=3609 pid=3610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755357.425:52): avc:  denied  { search } for  pid=3615 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755357.425:52): arch=40000003 syscall=195 success=no exit=-13 a0=bfedee90 a1=bfedfeec a2=a000 a3=887da10 items=0 ppid=3306 pid=3615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755357.425:53): avc:  denied  { search } for  pid=3615 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755357.425:53): arch=40000003 syscall=195 success=no exit=-13 a0=bfedee90 a1=bfedfeec a2=a000 a3=887da10 items=0 ppid=3306 pid=3615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1184755357.425:54): avc:  denied  { search } for  pid=3615 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1184755357.425:54): arch=40000003 syscall=195 success=no exit=-13 a0=bfedee90 a1=bfedfeec a2=a000 a3=887da10 items=0 ppid=3306 pid=3615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1184755364.535:55): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1184755364.535:56): user pid=3269 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1184755365.535:57): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1184755365.535:58): user pid=3556 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1184756461.529:59): user pid=4010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184756461.529:60): user pid=4010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184756461.529:61): login pid=4010 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184756461.529:62): user pid=4010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184756461.529:63): user pid=4010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184756461.529:64): user pid=4010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184760061.012:65): user pid=4990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184760061.012:66): user pid=4990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184760061.012:67): login pid=4990 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184760061.012:68): user pid=4990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184760061.012:69): user pid=4990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184760061.012:70): user pid=4990 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184763662.497:71): user pid=10446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184763662.497:72): user pid=10446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184763662.497:73): login pid=10446 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184763662.497:74): user pid=10446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184763662.497:75): user pid=10446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184763662.497:76): user pid=10446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1184766739.484:77): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1184766739.484:78): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1184766739.484:79): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1184766739.484:80): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1184766747.484:81): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1184766747.484:82): user pid=12361 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1184767260.982:83): user pid=12568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184767260.982:84): user pid=12568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184767260.982:85): login pid=12568 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184767260.982:86): user pid=12568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184767260.982:87): user pid=12568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184767260.982:88): user pid=12568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184770861.467:89): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184770861.467:90): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184770861.467:91): login pid=13389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184770861.467:92): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184770861.467:93): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184770861.467:94): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184774461.452:95): user pid=14335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184774461.452:96): user pid=14335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184774461.452:97): login pid=14335 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184774461.452:98): user pid=14335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184774461.452:99): user pid=14335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184774461.452:100): user pid=14335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184778061.437:101): user pid=15243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184778061.437:102): user pid=15243 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184778061.437:103): login pid=15243 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184778061.437:104): user pid=15243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184778061.437:105): user pid=15243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184778061.437:106): user pid=15243 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184781660.923:107): user pid=16207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184781660.923:108): user pid=16207 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184781660.923:109): login pid=16207 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184781660.923:110): user pid=16207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184781660.923:111): user pid=16207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184781660.923:112): user pid=16207 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1184785260.909:113): user pid=17071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1184785260.909:114): user pid=17071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1184785260.909:115): login pid=17071 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1184785260.909:116): user pid=17071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1184785260.909:117): user pid=17071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184785260.909:118): user pid=17071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1184787822.899:119): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1184787822.899:120): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1184787832.051:349) auditd normal halt, sending auid=4294967295 pid=18094 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2018
>type=DAEMON_START msg=audit(1185186050.490:1516) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2171 res=success, auditd pid=2171
>type=CONFIG_CHANGE msg=audit(1185186050.582:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185186050.582:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185186050.582:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185186050.582:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185186057.581:9): user pid=2337 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1185186076.081:10): user pid=2813 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185186088.081:11): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185186088.081:12): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185186088.081:13): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185186088.081:14): login pid=2899 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185186088.581:15): user pid=2899 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185186088.581:16): user pid=2899 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185186156.081:17): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1185186156.081:18): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1185186156.081:19): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1185186156.081:20): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1185186336.977:21): user pid=3934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=AVC msg=audit(1185186345.977:22): avc:  denied  { search } for  pid=3935 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186345.977:22): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b4fd0 a1=bf9b602c a2=a000 a3=81dea10 items=0 ppid=3734 pid=3935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186347.477:23): avc:  denied  { search } for  pid=3935 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186347.477:23): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b4fd0 a1=bf9b602c a2=a000 a3=81dea10 items=0 ppid=3734 pid=3935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186347.477:24): avc:  denied  { search } for  pid=3935 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186347.477:24): arch=40000003 syscall=195 success=no exit=-13 a0=bf9b4fd0 a1=bf9b602c a2=a000 a3=81dea10 items=0 ppid=3734 pid=3935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186349.477:25): avc:  denied  { search } for  pid=3944 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186349.477:25): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bd170 a1=bf9be1cc a2=a000 a3=819ba10 items=0 ppid=3943 pid=3944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186349.477:26): avc:  denied  { search } for  pid=3944 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186349.477:26): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bd170 a1=bf9be1cc a2=a000 a3=819ba10 items=0 ppid=3943 pid=3944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186349.477:27): avc:  denied  { search } for  pid=3944 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186349.477:27): arch=40000003 syscall=195 success=no exit=-13 a0=bf9bd170 a1=bf9be1cc a2=a000 a3=819ba10 items=0 ppid=3943 pid=3944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186350.977:28): avc:  denied  { search } for  pid=3949 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186350.977:28): arch=40000003 syscall=195 success=no exit=-13 a0=bf92b0e0 a1=bf92c13c a2=a000 a3=9ebfa10 items=0 ppid=3948 pid=3949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186350.977:29): avc:  denied  { search } for  pid=3949 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186350.977:29): arch=40000003 syscall=195 success=no exit=-13 a0=bf92b0e0 a1=bf92c13c a2=a000 a3=9ebfa10 items=0 ppid=3948 pid=3949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186350.977:30): avc:  denied  { search } for  pid=3949 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186350.977:30): arch=40000003 syscall=195 success=no exit=-13 a0=bf92b0e0 a1=bf92c13c a2=a000 a3=9ebfa10 items=0 ppid=3948 pid=3949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186390.477:31): avc:  denied  { search } for  pid=3963 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186390.477:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfa399f0 a1=bfa3aa4c a2=a000 a3=910ca10 items=0 ppid=3734 pid=3963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186390.477:32): avc:  denied  { search } for  pid=3963 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186390.477:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfa399f0 a1=bfa3aa4c a2=a000 a3=910ca10 items=0 ppid=3734 pid=3963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186390.477:33): avc:  denied  { search } for  pid=3963 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186390.477:33): arch=40000003 syscall=195 success=no exit=-13 a0=bfa399f0 a1=bfa3aa4c a2=a000 a3=910ca10 items=0 ppid=3734 pid=3963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186393.977:34): avc:  denied  { search } for  pid=3965 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186393.977:34): arch=40000003 syscall=195 success=no exit=-13 a0=bfb70320 a1=bfb7137c a2=a000 a3=8e19a10 items=0 ppid=3734 pid=3965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186393.977:35): avc:  denied  { search } for  pid=3965 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186393.977:35): arch=40000003 syscall=195 success=no exit=-13 a0=bfb70320 a1=bfb7137c a2=a000 a3=8e19a10 items=0 ppid=3734 pid=3965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186393.977:36): avc:  denied  { search } for  pid=3965 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186393.977:36): arch=40000003 syscall=195 success=no exit=-13 a0=bfb70320 a1=bfb7137c a2=a000 a3=8e19a10 items=0 ppid=3734 pid=3965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1185186498.977:37): user pid=5208 uid=0 auid=500 subj=user_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185186509.477:38): avc:  denied  { search } for  pid=5211 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186509.477:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7a230 a1=bfa7b28c a2=a000 a3=97c2a10 items=0 ppid=3734 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186509.977:39): avc:  denied  { search } for  pid=5211 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186509.977:39): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7a230 a1=bfa7b28c a2=a000 a3=97c2a10 items=0 ppid=3734 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186509.977:40): avc:  denied  { search } for  pid=5211 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186509.977:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfa7a230 a1=bfa7b28c a2=a000 a3=97c2a10 items=0 ppid=3734 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186522.477:41): avc:  denied  { search } for  pid=5229 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186522.477:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfb97350 a1=bfb983ac a2=a000 a3=9f2aa10 items=0 ppid=3734 pid=5229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186522.477:42): avc:  denied  { search } for  pid=5229 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186522.477:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfb97350 a1=bfb983ac a2=a000 a3=9f2aa10 items=0 ppid=3734 pid=5229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186522.477:43): avc:  denied  { search } for  pid=5229 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186522.477:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfb97350 a1=bfb983ac a2=a000 a3=9f2aa10 items=0 ppid=3734 pid=5229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186523.477:44): avc:  denied  { search } for  pid=5230 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186523.477:44): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd7b90 a1=bfbd8bec a2=a000 a3=8e0da10 items=0 ppid=3734 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186523.477:45): avc:  denied  { search } for  pid=5230 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186523.477:45): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd7b90 a1=bfbd8bec a2=a000 a3=8e0da10 items=0 ppid=3734 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186523.477:46): avc:  denied  { search } for  pid=5230 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186523.477:46): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd7b90 a1=bfbd8bec a2=a000 a3=8e0da10 items=0 ppid=3734 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186524.977:47): avc:  denied  { search } for  pid=5247 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186524.977:47): arch=40000003 syscall=195 success=no exit=-13 a0=bffd5780 a1=bffd67dc a2=a000 a3=9e43a10 items=0 ppid=3734 pid=5247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186524.977:48): avc:  denied  { search } for  pid=5247 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186524.977:48): arch=40000003 syscall=195 success=no exit=-13 a0=bffd5780 a1=bffd67dc a2=a000 a3=9e43a10 items=0 ppid=3734 pid=5247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186524.977:49): avc:  denied  { search } for  pid=5247 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186524.977:49): arch=40000003 syscall=195 success=no exit=-13 a0=bffd5780 a1=bffd67dc a2=a000 a3=9e43a10 items=0 ppid=3734 pid=5247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186529.477:50): avc:  denied  { search } for  pid=5260 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186529.477:50): arch=40000003 syscall=195 success=no exit=-13 a0=bfe04dc0 a1=bfe05e1c a2=a000 a3=8924a10 items=0 ppid=5259 pid=5260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186529.477:51): avc:  denied  { search } for  pid=5260 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186529.477:51): arch=40000003 syscall=195 success=no exit=-13 a0=bfe04dc0 a1=bfe05e1c a2=a000 a3=8924a10 items=0 ppid=5259 pid=5260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185186529.477:52): avc:  denied  { search } for  pid=5260 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185186529.477:52): arch=40000003 syscall=195 success=no exit=-13 a0=bfe04dc0 a1=bfe05e1c a2=a000 a3=8924a10 items=0 ppid=5259 pid=5260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1185188460.983:53): user pid=21629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185188460.983:54): user pid=21629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185188460.983:55): login pid=21629 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185188460.983:56): user pid=21629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185188461.483:57): user pid=21629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185188461.483:58): user pid=21629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185192061.479:59): user pid=22489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185192061.479:60): user pid=22489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185192061.479:61): login pid=22489 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185192061.479:62): user pid=22489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185192061.479:63): user pid=22489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185192061.479:64): user pid=22489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185194264.470:65): user pid=27805 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185194264.470:66): user pid=27805 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185194264.470:67): user pid=27805 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185194279.970:68): user pid=27805 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1185195236.467:69): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1185195236.467:70): user pid=3504 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1185195248.467:71): user pid=2899 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185195248.467:72): user pid=2899 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1185195259.630:1517) auditd normal halt, sending auid=4294967295 pid=28524 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2171
>type=DAEMON_START msg=audit(1185195411.507:3408) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2175 res=success, auditd pid=2175
>type=CONFIG_CHANGE msg=audit(1185195411.238:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185195411.238:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185195411.238:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185195411.238:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185195418.737:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1185195436.736:10): user pid=2841 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185195468.736:11): user pid=2903 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185195468.736:12): user pid=2903 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185195468.736:13): user pid=2903 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185195468.736:14): login pid=2903 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185195469.236:15): user pid=2903 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185195469.236:16): user pid=2903 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185195661.236:17): user pid=3513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185195661.236:18): user pid=3513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185195661.236:19): login pid=3513 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185195661.236:20): user pid=3513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185195661.236:21): user pid=3513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185195661.236:22): user pid=3513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185196648.785:23): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185196648.785:24): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1185196648.785:25): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1185196648.785:26): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185199261.307:27): user pid=20129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185199261.307:28): user pid=20129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185199261.307:29): login pid=20129 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185199261.307:30): user pid=20129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185199261.307:31): user pid=20129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185199261.307:32): user pid=20129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185202861.301:33): user pid=9381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185202861.301:34): user pid=9381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185202861.301:35): login pid=9381 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185202861.301:36): user pid=9381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185202861.301:37): user pid=9381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185202861.301:38): user pid=9381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185206461.790:39): user pid=15166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185206461.790:40): user pid=15166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185206461.790:41): login pid=15166 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185206461.790:42): user pid=15166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185206461.790:43): user pid=15166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185206461.790:44): user pid=15166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185210061.283:45): user pid=15994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185210061.283:46): user pid=15994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185210061.283:47): login pid=15994 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185210061.283:48): user pid=15994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185210061.283:49): user pid=15994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185210061.283:50): user pid=15994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185212701.276:51): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185212701.276:52): user pid=3851 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185212747.276:53): user pid=2903 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185212747.276:54): user pid=2903 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1185212753.162:3409) auditd normal halt, sending auid=4294967295 pid=16888 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2175
>type=DAEMON_START msg=audit(1185275869.612:9777) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2036 res=success, auditd pid=2036
>type=CONFIG_CHANGE msg=audit(1185275869.348:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185275869.348:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185275869.348:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185275869.348:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185275876.346:9): user pid=2204 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185275880.346:10): avc:  denied  { read write } for  pid=2279 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185275880.346:10): arch=40000003 syscall=11 success=yes exit=0 a0=8122a300 a1=8122c768 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185275880.346:10):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185275880.346:11): avc:  denied  { read write } for  pid=2280 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185275880.346:11): arch=40000003 syscall=11 success=yes exit=0 a0=8122ca98 a1=8122cb28 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185275880.346:11):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185275896.846:12): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185275910.346:13): user pid=2769 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185275910.346:14): user pid=2769 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185275910.346:15): user pid=2769 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185275910.346:16): login pid=2769 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185275910.346:17): user pid=2769 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185275910.346:18): user pid=2769 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185275962.846:19): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1185275962.846:20): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1185275962.846:21): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1185275962.846:22): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1185276023.346:23): avc:  denied  { search } for  pid=3468 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276023.346:23): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fd390 a1=bf9fe3ec a2=a000 a3=96a9a10 items=0 ppid=3291 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276024.346:24): avc:  denied  { search } for  pid=3468 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276024.346:24): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fd390 a1=bf9fe3ec a2=a000 a3=96a9a10 items=0 ppid=3291 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276024.846:25): avc:  denied  { search } for  pid=3468 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276024.846:25): arch=40000003 syscall=195 success=no exit=-13 a0=bf9fd390 a1=bf9fe3ec a2=a000 a3=96a9a10 items=0 ppid=3291 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276043.846:26): avc:  denied  { search } for  pid=3483 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276043.846:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfa30c80 a1=bfa31cdc a2=a000 a3=9b87a10 items=0 ppid=3481 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276043.846:27): avc:  denied  { search } for  pid=3483 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276043.846:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfa30c80 a1=bfa31cdc a2=a000 a3=9b87a10 items=0 ppid=3481 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276043.846:28): avc:  denied  { search } for  pid=3483 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276043.846:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfa30c80 a1=bfa31cdc a2=a000 a3=9b87a10 items=0 ppid=3481 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AVC msg=audit(1185276105.845:29): user pid=2108 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1185276105.845:30): policy loaded auid=500
>type=SYSCALL msg=audit(1185276105.845:30): arch=40000003 syscall=4 success=yes exit=1558547 a0=4 a1=b7df7000 a2=17c813 a3=bfe40828 items=0 ppid=3743 pid=3745 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1185276112.345:31): user pid=2108 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1185276112.345:32): policy loaded auid=500
>type=SYSCALL msg=audit(1185276112.345:32): arch=40000003 syscall=4 success=yes exit=1562329 a0=4 a1=b7de0000 a2=17d6d9 a3=bf834d98 items=0 ppid=3749 pid=3751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1185276114.845:33): user pid=3793 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1185276115.345:34): user pid=3794 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1185276121.845:35): avc:  denied  { search } for  pid=3801 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276121.845:35): arch=40000003 syscall=195 success=no exit=-13 a0=bf90c0c0 a1=bf90d11c a2=a000 a3=9dd9a10 items=0 ppid=3800 pid=3801 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276121.845:36): avc:  denied  { search } for  pid=3801 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276121.845:36): arch=40000003 syscall=195 success=no exit=-13 a0=bf90c0c0 a1=bf90d11c a2=a000 a3=9dd9a10 items=0 ppid=3800 pid=3801 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276121.845:37): avc:  denied  { search } for  pid=3801 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276121.845:37): arch=40000003 syscall=195 success=no exit=-13 a0=bf90c0c0 a1=bf90d11c a2=a000 a3=9dd9a10 items=0 ppid=3800 pid=3801 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276126.345:38): avc:  denied  { search } for  pid=3873 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276126.345:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfe1d5d0 a1=bfe1e62c a2=a000 a3=9d07a10 items=0 ppid=3872 pid=3873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276126.345:39): avc:  denied  { search } for  pid=3873 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276126.345:39): arch=40000003 syscall=195 success=no exit=-13 a0=bfe1d5d0 a1=bfe1e62c a2=a000 a3=9d07a10 items=0 ppid=3872 pid=3873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276126.345:40): avc:  denied  { search } for  pid=3873 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276126.345:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfe1d5d0 a1=bfe1e62c a2=a000 a3=9d07a10 items=0 ppid=3872 pid=3873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276131.345:41): avc:  denied  { search } for  pid=3890 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276131.345:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5ed10 a1=bfd5fd6c a2=a000 a3=9c6ba10 items=0 ppid=3889 pid=3890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276131.345:42): avc:  denied  { search } for  pid=3890 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276131.345:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5ed10 a1=bfd5fd6c a2=a000 a3=9c6ba10 items=0 ppid=3889 pid=3890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185276131.345:43): avc:  denied  { search } for  pid=3890 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185276131.345:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfd5ed10 a1=bfd5fd6c a2=a000 a3=9c6ba10 items=0 ppid=3889 pid=3890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1185276965.166:44): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185276965.166:45): user pid=3257 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1185278461.658:46): user pid=4623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185278461.658:47): user pid=4623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185278461.658:48): login pid=4623 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185278461.658:49): user pid=4623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185278461.658:50): user pid=4623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185278461.658:51): user pid=4623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185278832.156:52): avc:  denied  { read write } for  pid=4695 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185278832.156:52): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185278832.156:52):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185278833.156:53): avc:  denied  { read write } for  pid=4698 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185278833.156:53): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=4698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185278833.156:53):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185279626.150:54): avc:  denied  { read write } for  pid=5141 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185279626.150:54): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=5141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185279626.150:54):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185279626.150:55): avc:  denied  { read write } for  pid=5143 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185279626.150:55): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=5143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185279626.150:55):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185279851.648:56): avc:  denied  { read write } for  pid=5204 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185279851.648:56): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185279851.648:56):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185279851.648:57): avc:  denied  { read write } for  pid=5206 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185279851.648:57): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=5206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185279851.648:57):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185280094.146:58): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185280094.146:59): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1185280094.146:60): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1185280094.146:61): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=AVC msg=audit(1185281700.135:62): avc:  denied  { read write } for  pid=21913 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185281700.135:62): arch=40000003 syscall=11 success=yes exit=0 a0=8122a300 a1=8122c768 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=21913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185281700.135:62):  path="anon_inode:[eventpoll]"
>type=CRED_DISP msg=audit(1185282018.133:63): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185282018.133:64): user pid=5284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185282062.133:65): user pid=22098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185282062.133:66): user pid=22098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185282062.133:67): login pid=22098 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185282062.133:68): user pid=22098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185282062.133:69): user pid=22098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185282062.133:70): user pid=22098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185282846.628:71): avc:  denied  { read write } for  pid=22610 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185282846.628:71): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=22610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185282846.628:71):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185282847.128:72): avc:  denied  { read write } for  pid=22618 comm="local" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185282847.128:72): arch=40000003 syscall=11 success=yes exit=0 a0=8122e2e0 a1=8122e350 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=22618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185282847.128:72):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185285661.112:73): user pid=25129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185285661.112:74): user pid=25129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185285661.112:75): login pid=25129 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185285661.112:76): user pid=25129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185285661.112:77): user pid=25129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185285661.112:78): user pid=25129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185285864.111:79): avc:  denied  { read write } for  pid=25171 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185285864.111:79): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=25171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185285864.111:79):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185285865.111:80): avc:  denied  { read write } for  pid=25173 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185285865.111:80): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=25173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185285865.111:80):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185286597.108:81): avc:  denied  { read write } for  pid=25327 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185286597.108:81): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=25327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185286597.108:81):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185286597.108:82): avc:  denied  { read write } for  pid=25329 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185286597.108:82): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=25329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185286597.108:82):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185287520.104:83): avc:  denied  { read write } for  pid=25650 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185287520.104:83): arch=40000003 syscall=11 success=yes exit=0 a0=8122a300 a1=8122c768 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=25650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185287520.104:83):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185289261.098:84): user pid=25969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185289261.098:85): user pid=25969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185289261.098:86): login pid=25969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185289261.098:87): user pid=25969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185289261.098:88): user pid=25969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185289261.098:89): user pid=25969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185292449.092:90): avc:  denied  { read write } for  pid=26743 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185292449.092:90): arch=40000003 syscall=11 success=yes exit=0 a0=8122c898 a1=8122c950 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=26743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185292449.092:90):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185292449.092:91): avc:  denied  { read write } for  pid=26745 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185292449.092:91): arch=40000003 syscall=11 success=yes exit=0 a0=8122da18 a1=8122dab8 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=26745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185292449.092:91):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185292523.591:92): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185292523.591:93): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1185292523.591:94): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1185292523.591:95): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185292861.090:96): user pid=26884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185292861.090:97): user pid=26884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185292861.090:98): login pid=26884 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185292861.090:99): user pid=26884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185292861.090:100): user pid=26884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185292861.090:101): user pid=26884 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185293460.589:102): avc:  denied  { read write } for  pid=27013 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185293460.589:102): arch=40000003 syscall=11 success=yes exit=0 a0=8122a300 a1=8122c768 a2=8122a1a0 a3=1 items=0 ppid=2275 pid=27013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185293460.589:102):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185296461.081:103): user pid=27706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185296461.081:104): user pid=27706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185296461.081:105): login pid=27706 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185296461.081:106): user pid=27706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185296461.081:107): user pid=27706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185296461.081:108): user pid=27706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185298191.076:109): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185298191.076:110): user pid=26789 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185298204.076:111): user pid=2769 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185298204.076:112): user pid=2769 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1185298208.576:113): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2469 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185298212.698:9778) auditd normal halt, sending auid=4294967295 pid=28561 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2036
>type=DAEMON_START msg=audit(1185353446.580:3990) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2034 res=success, auditd pid=2034
>type=CONFIG_CHANGE msg=audit(1185353446.329:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185353446.329:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185353446.329:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185353446.329:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185353454.328:9): user pid=2198 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185353457.328:10): avc:  denied  { read write } for  pid=2273 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185353457.328:10): arch=40000003 syscall=11 success=yes exit=0 a0=8198e300 a1=81990768 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185353457.328:10):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185353457.328:11): avc:  denied  { read write } for  pid=2274 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185353457.328:11): arch=40000003 syscall=11 success=yes exit=0 a0=81990a98 a1=81990b28 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185353457.328:11):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185353473.328:12): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185353485.828:13): user pid=2763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185353485.828:14): user pid=2763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185353485.828:15): user pid=2763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185353485.828:16): login pid=2763 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185353485.828:17): user pid=2763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185353485.828:18): user pid=2763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185354061.425:19): user pid=3516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185354061.425:20): user pid=3516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185354061.425:21): login pid=3516 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185354061.425:22): user pid=3516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185354061.425:23): user pid=3516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185354061.425:24): user pid=3516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185356921.916:25): user pid=4472 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185356921.916:26): user pid=4472 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185356921.916:27): user pid=4472 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185356934.916:28): user pid=4472 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185357661.414:29): user pid=5012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185357661.414:30): user pid=5012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185357661.414:31): login pid=5012 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185357661.414:32): user pid=5012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185357661.414:33): user pid=5012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185357661.414:34): user pid=5012 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1185358487.412:35): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5260 comm="timetest" sig=11
>type=AVC msg=audit(1185359457.909:36): avc:  denied  { read write } for  pid=5496 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185359457.909:36): arch=40000003 syscall=11 success=yes exit=0 a0=8198e300 a1=81990768 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185359457.909:36):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185360426.906:37): avc:  denied  { read write } for  pid=6157 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185360426.906:37): arch=40000003 syscall=11 success=yes exit=0 a0=81990898 a1=81990950 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185360426.906:37):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185360427.406:38): avc:  denied  { read write } for  pid=6165 comm="local" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185360427.406:38): arch=40000003 syscall=11 success=yes exit=0 a0=819922e0 a1=81992350 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185360427.406:38):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185361101.404:39): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1185361101.404:40): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1185361101.404:41): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1185361101.404:42): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1185361261.404:43): user pid=8597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185361261.404:44): user pid=8597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185361261.404:45): login pid=8597 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185361261.404:46): user pid=8597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185361261.404:47): user pid=8597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185361261.404:48): user pid=8597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185362344.900:49): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185362344.900:50): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_START msg=audit(1185362344.900:51): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=CRED_ACQ msg=audit(1185362344.900:52): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185364861.374:53): user pid=12585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185364861.374:54): user pid=12585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185364861.374:55): login pid=12585 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185364861.374:56): user pid=12585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185364861.374:57): user pid=12585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185364861.374:58): user pid=12585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1185365168.871:59): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12660 comm="timetest" sig=11
>type=AVC msg=audit(1185365397.870:60): avc:  denied  { read write } for  pid=12711 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185365397.870:60): arch=40000003 syscall=11 success=yes exit=0 a0=8198e300 a1=81990768 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=12711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185365397.870:60):  path="anon_inode:[eventpoll]"
>type=CRED_DISP msg=audit(1185366238.364:61): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_END msg=audit(1185366238.364:62): user pid=8998 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)'
>type=USER_ACCT msg=audit(1185368461.350:63): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185368461.350:64): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185368461.350:65): login pid=13631 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185368461.350:66): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185368461.350:67): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185368461.350:68): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185371397.843:69): avc:  denied  { read write } for  pid=14174 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185371397.843:69): arch=40000003 syscall=11 success=yes exit=0 a0=8198e300 a1=81990768 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=14174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185371397.843:69):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185372061.342:70): user pid=14451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185372061.342:71): user pid=14451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185372061.342:72): login pid=14451 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185372061.842:73): user pid=14451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185372061.842:74): user pid=14451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185372061.842:75): user pid=14451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185375626.328:76): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1185375626.328:77): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1185375626.328:78): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1185375626.328:79): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1185375661.828:80): user pid=15390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185375661.828:81): user pid=15390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185375661.828:82): login pid=15390 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185375661.828:83): user pid=15390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185375661.828:84): user pid=15390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185375661.828:85): user pid=15390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185375936.827:86): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1185375936.827:87): user pid=15329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=AVC msg=audit(1185377397.821:88): avc:  denied  { read write } for  pid=15729 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185377397.821:88): arch=40000003 syscall=11 success=yes exit=0 a0=8198e300 a1=81990768 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=15729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185377397.821:88):  path="anon_inode:[eventpoll]"
>type=CRED_DISP msg=audit(1185377799.820:89): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1185377799.820:90): user pid=8382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=AVC msg=audit(1185378461.818:91): avc:  denied  { read write } for  pid=15986 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185378461.818:91): arch=40000003 syscall=11 success=yes exit=0 a0=81990898 a1=81990950 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=15986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185378461.818:91):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185378461.818:92): avc:  denied  { read write } for  pid=15988 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185378461.818:92): arch=40000003 syscall=11 success=yes exit=0 a0=81991a18 a1=81991ab8 a2=8198e1a0 a3=1 items=0 ppid=2269 pid=15988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185378461.818:92):  path="anon_inode:[eventpoll]"
>type=USER_END msg=audit(1185378898.816:93): user pid=2763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185378898.816:94): user pid=2763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1185378901.816:95): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2463 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185378903.829:3991) auditd normal halt, sending auid=4294967295 pid=16609 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2034
>type=DAEMON_START msg=audit(1185444512.543:1703) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2031 res=success, auditd pid=2031
>type=CONFIG_CHANGE msg=audit(1185444512.339:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185444512.339:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185444512.339:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185444512.339:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185444519.338:9): user pid=2195 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185444523.338:10): avc:  denied  { read write } for  pid=2270 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185444523.338:10): arch=40000003 syscall=11 success=yes exit=0 a0=81523300 a1=81525768 a2=815231a0 a3=1 items=0 ppid=2266 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185444523.338:10):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185444523.338:11): avc:  denied  { read write } for  pid=2271 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185444523.338:11): arch=40000003 syscall=11 success=yes exit=0 a0=81525a98 a1=81525b28 a2=815231a0 a3=1 items=0 ppid=2266 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185444523.338:11):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185444539.838:12): user pid=2675 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185444554.837:13): user pid=2758 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185444554.837:14): user pid=2758 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185444554.837:15): user pid=2758 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185444554.837:16): login pid=2758 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185444554.837:17): user pid=2758 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185444554.837:18): user pid=2758 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185444745.836:19): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1185444745.836:20): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1185444745.836:21): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1185444745.836:22): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1185444789.168:23): avc:  denied  { search } for  pid=3643 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444789.168:23): arch=40000003 syscall=195 success=no exit=-13 a0=bfd67f60 a1=bfd68fbc a2=a000 a3=8d35a10 items=0 ppid=3477 pid=3643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444790.168:24): avc:  denied  { search } for  pid=3643 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444790.168:24): arch=40000003 syscall=195 success=no exit=-13 a0=bfd67f60 a1=bfd68fbc a2=a000 a3=8d35a10 items=0 ppid=3477 pid=3643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444790.668:25): avc:  denied  { search } for  pid=3643 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444790.668:25): arch=40000003 syscall=195 success=no exit=-13 a0=bfd67f60 a1=bfd68fbc a2=a000 a3=8d35a10 items=0 ppid=3477 pid=3643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444792.168:26): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444792.168:26): arch=40000003 syscall=195 success=no exit=-13 a0=bff36ee0 a1=bff37f3c a2=a000 a3=8695a10 items=0 ppid=3477 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444792.168:27): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444792.168:27): arch=40000003 syscall=195 success=no exit=-13 a0=bff36ee0 a1=bff37f3c a2=a000 a3=8695a10 items=0 ppid=3477 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444792.168:28): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444792.168:28): arch=40000003 syscall=195 success=no exit=-13 a0=bff36ee0 a1=bff37f3c a2=a000 a3=8695a10 items=0 ppid=3477 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444794.668:29): avc:  denied  { search } for  pid=3651 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444794.668:29): arch=40000003 syscall=195 success=no exit=-13 a0=bf9190d0 a1=bf91a12c a2=a000 a3=8da5a10 items=0 ppid=3477 pid=3651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444794.668:30): avc:  denied  { search } for  pid=3651 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444794.668:30): arch=40000003 syscall=195 success=no exit=-13 a0=bf9190d0 a1=bf91a12c a2=a000 a3=8da5a10 items=0 ppid=3477 pid=3651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444794.668:31): avc:  denied  { search } for  pid=3651 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444794.668:31): arch=40000003 syscall=195 success=no exit=-13 a0=bf9190d0 a1=bf91a12c a2=a000 a3=8da5a10 items=0 ppid=3477 pid=3651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444802.668:32): avc:  denied  { search } for  pid=3654 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444802.668:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfe455f0 a1=bfe4664c a2=a000 a3=a078a10 items=0 ppid=3477 pid=3654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444802.668:33): avc:  denied  { search } for  pid=3654 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444802.668:33): arch=40000003 syscall=195 success=no exit=-13 a0=bfe455f0 a1=bfe4664c a2=a000 a3=a078a10 items=0 ppid=3477 pid=3654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444802.668:34): avc:  denied  { search } for  pid=3654 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444802.668:34): arch=40000003 syscall=195 success=no exit=-13 a0=bfe455f0 a1=bfe4664c a2=a000 a3=a078a10 items=0 ppid=3477 pid=3654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444803.168:35): avc:  denied  { search } for  pid=3655 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444803.168:35): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=9115a10 items=0 ppid=3477 pid=3655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444803.168:36): avc:  denied  { search } for  pid=3655 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444803.168:36): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=9115a10 items=0 ppid=3477 pid=3655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444803.168:37): avc:  denied  { search } for  pid=3655 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444803.168:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfbda390 a1=bfbdb3ec a2=a000 a3=9115a10 items=0 ppid=3477 pid=3655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444806.168:38): avc:  denied  { search } for  pid=3657 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444806.168:38): arch=40000003 syscall=195 success=no exit=-13 a0=bff9d750 a1=bff9e7ac a2=a000 a3=87e6a10 items=0 ppid=3477 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444806.168:39): avc:  denied  { search } for  pid=3657 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444806.168:39): arch=40000003 syscall=195 success=no exit=-13 a0=bff9d750 a1=bff9e7ac a2=a000 a3=87e6a10 items=0 ppid=3477 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185444806.168:40): avc:  denied  { search } for  pid=3657 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185444806.168:40): arch=40000003 syscall=195 success=no exit=-13 a0=bff9d750 a1=bff9e7ac a2=a000 a3=87e6a10 items=0 ppid=3477 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1185444818.667:41): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1185444818.667:42): user pid=3443 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1185447662.151:43): user pid=4460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185447662.151:44): user pid=4460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185447662.151:45): login pid=4460 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185447662.151:46): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185447662.151:47): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185447662.151:48): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185450523.640:49): avc:  denied  { read write } for  pid=5149 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185450523.640:49): arch=40000003 syscall=11 success=yes exit=0 a0=81523300 a1=81525768 a2=815231a0 a3=1 items=0 ppid=2266 pid=5149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185450523.640:49):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185451261.137:50): user pid=5286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185451261.137:51): user pid=5286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185451261.137:52): login pid=5286 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185451261.137:53): user pid=5286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185451261.137:54): user pid=5286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185451261.137:55): user pid=5286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185451489.636:56): avc:  denied  { read write } for  pid=5672 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185451489.636:56): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=5672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185451489.636:56):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185451489.636:57): avc:  denied  { read write } for  pid=5680 comm="local" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185451489.636:57): arch=40000003 syscall=11 success=yes exit=0 a0=815272e0 a1=81527350 a2=815231a0 a3=1 items=0 ppid=2266 pid=5680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185451489.636:57):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185454861.121:58): user pid=7596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185454861.121:59): user pid=7596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185454861.121:60): login pid=7596 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185454861.121:61): user pid=7596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185454861.121:62): user pid=7596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185454861.121:63): user pid=7596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185455894.116:64): avc:  denied  { read write } for  pid=8174 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185455894.116:64): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=8174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185455894.116:64):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185455894.616:65): avc:  denied  { read write } for  pid=8176 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185455894.616:65): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=8176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185455894.616:65):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185456403.614:66): avc:  denied  { read write } for  pid=8270 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185456403.614:66): arch=40000003 syscall=11 success=yes exit=0 a0=81523300 a1=81525768 a2=815231a0 a3=1 items=0 ppid=2266 pid=8270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185456403.614:66):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185458461.104:67): user pid=8649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185458461.104:68): user pid=8649 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185458461.104:69): login pid=8649 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185458461.104:70): user pid=8649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185458461.104:71): user pid=8649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185458461.104:72): user pid=8649 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185460938.092:73): avc:  denied  { read write } for  pid=9313 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185460938.092:73): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=9313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185460938.092:73):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185460938.092:74): avc:  denied  { read write } for  pid=9315 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185460938.092:74): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=9315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185460938.092:74):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185461174.591:75): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1185461174.591:76): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1185461174.591:77): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1185461174.591:78): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_DISP msg=audit(1185461186.591:79): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1185461186.591:80): user pid=9360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1185462061.087:81): user pid=9627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185462061.087:82): user pid=9627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185462061.087:83): login pid=9627 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185462061.087:84): user pid=9627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185462061.087:85): user pid=9627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185462061.087:86): user pid=9627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185462343.586:87): avc:  denied  { read write } for  pid=9684 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462343.586:87): arch=40000003 syscall=11 success=yes exit=0 a0=81523300 a1=81525768 a2=815231a0 a3=1 items=0 ppid=2266 pid=9684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462343.586:87):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185462398.086:88): avc:  denied  { read write } for  pid=9696 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462398.086:88): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=9696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462398.086:88):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185462398.086:89): avc:  denied  { read write } for  pid=9698 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462398.086:89): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=9698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462398.086:89):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185462398.086:90): avc:  denied  { read write } for  pid=9699 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462398.086:90): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=9699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462398.086:90):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185462700.084:91): avc:  denied  { read write } for  pid=9922 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462700.084:91): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=9922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462700.084:91):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185462700.084:92): avc:  denied  { read write } for  pid=9924 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185462700.084:92): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=9924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185462700.084:92):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185465661.071:93): user pid=10586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185465661.071:94): user pid=10586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185465661.071:95): login pid=10586 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185465661.071:96): user pid=10586 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185465661.071:97): user pid=10586 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185465661.071:98): user pid=10586 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185466345.068:99): avc:  denied  { read write } for  pid=10879 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185466345.068:99): arch=40000003 syscall=11 success=yes exit=0 a0=81525898 a1=81525950 a2=815231a0 a3=1 items=0 ppid=2266 pid=10879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185466345.068:99):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185466345.068:100): avc:  denied  { read write } for  pid=10881 comm="smtp" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_smtp_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185466345.068:100): arch=40000003 syscall=11 success=yes exit=0 a0=81526a18 a1=81526ab8 a2=815231a0 a3=1 items=0 ppid=2266 pid=10881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185466345.068:100):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185468163.060:101): avc:  denied  { read write } for  pid=11248 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185468163.060:101): arch=40000003 syscall=11 success=yes exit=0 a0=81523300 a1=81525768 a2=815231a0 a3=1 items=0 ppid=2266 pid=11248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185468163.060:101):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185469261.056:102): user pid=11447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185469261.056:103): user pid=11447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185469261.056:104): login pid=11447 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185469261.556:105): user pid=11447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185469261.556:106): user pid=11447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185469261.556:107): user pid=11447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185469408.055:108): user pid=2758 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185469408.055:109): user pid=2758 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1185469412.055:110): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2460 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185469416.082:1704) auditd normal halt, sending auid=4294967295 pid=11948 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2031
>type=DAEMON_START msg=audit(1185868375.589:6886) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2039 res=success, auditd pid=2039
>type=CONFIG_CHANGE msg=audit(1185868375.335:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185868375.335:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185868375.335:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185868375.335:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185868382.834:10): user pid=2203 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185868386.334:11): avc:  denied  { read write } for  pid=2278 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185868386.334:11): arch=40000003 syscall=11 success=yes exit=0 a0=80e3c300 a1=80e3e768 a2=80e3c1a0 a3=1 items=0 ppid=2274 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185868386.334:11):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185868386.334:12): avc:  denied  { read write } for  pid=2279 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
>type=SYSCALL msg=audit(1185868386.334:12): arch=40000003 syscall=11 success=yes exit=0 a0=80e3ea98 a1=80e3eb28 a2=80e3c1a0 a3=1 items=0 ppid=2274 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185868386.334:12):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185868403.334:13): user pid=2681 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185868416.834:14): user pid=2762 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185868416.834:15): user pid=2762 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185868416.834:16): user pid=2762 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185868416.834:17): login pid=2762 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185868416.834:18): user pid=2762 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185868416.834:19): user pid=2762 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185868453.333:20): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1185868453.333:21): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1185868453.333:22): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1185868453.333:23): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1185868642.333:24): avc:  denied  { search } for  pid=3519 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868642.333:24): arch=40000003 syscall=195 success=no exit=-13 a0=bfbfbfc0 a1=bfbfd01c a2=a000 a3=91c0a10 items=0 ppid=3367 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868643.833:25): avc:  denied  { search } for  pid=3519 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868643.833:25): arch=40000003 syscall=195 success=no exit=-13 a0=bfbfbfc0 a1=bfbfd01c a2=a000 a3=91c0a10 items=0 ppid=3367 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868643.833:26): avc:  denied  { search } for  pid=3519 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868643.833:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfbfbfc0 a1=bfbfd01c a2=a000 a3=91c0a10 items=0 ppid=3367 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868645.833:27): avc:  denied  { search } for  pid=3522 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868645.833:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfc6ec20 a1=bfc6fc7c a2=a000 a3=8a6ca10 items=0 ppid=3367 pid=3522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868645.833:28): avc:  denied  { search } for  pid=3522 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868645.833:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfc6ec20 a1=bfc6fc7c a2=a000 a3=8a6ca10 items=0 ppid=3367 pid=3522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868645.833:29): avc:  denied  { search } for  pid=3522 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868645.833:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfc6ec20 a1=bfc6fc7c a2=a000 a3=8a6ca10 items=0 ppid=3367 pid=3522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868647.258:30): avc:  denied  { search } for  pid=3530 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868647.258:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfd70d20 a1=bfd71d7c a2=a000 a3=a00ba10 items=0 ppid=3529 pid=3530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868647.258:31): avc:  denied  { search } for  pid=3530 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868647.258:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfd70d20 a1=bfd71d7c a2=a000 a3=a00ba10 items=0 ppid=3529 pid=3530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868647.258:32): avc:  denied  { search } for  pid=3530 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868647.258:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfd70d20 a1=bfd71d7c a2=a000 a3=a00ba10 items=0 ppid=3529 pid=3530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AVC msg=audit(1185868683.758:33): user pid=2111 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1185868683.258:34): policy loaded auid=500
>type=SYSCALL msg=audit(1185868683.258:34): arch=40000003 syscall=4 success=yes exit=1564162 a0=4 a1=b7df7000 a2=17de02 a3=bf8ad618 items=0 ppid=4700 pid=4702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=AVC msg=audit(1185868700.757:35): avc:  denied  { search } for  pid=4748 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868700.757:35): arch=40000003 syscall=195 success=no exit=-13 a0=bff3fef0 a1=bff40f4c a2=a000 a3=9851a10 items=0 ppid=4747 pid=4748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868700.757:36): avc:  denied  { search } for  pid=4748 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868700.757:36): arch=40000003 syscall=195 success=no exit=-13 a0=bff3fef0 a1=bff40f4c a2=a000 a3=9851a10 items=0 ppid=4747 pid=4748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868700.757:37): avc:  denied  { search } for  pid=4748 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868700.757:37): arch=40000003 syscall=195 success=no exit=-13 a0=bff3fef0 a1=bff40f4c a2=a000 a3=9851a10 items=0 ppid=4747 pid=4748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868701.257:38): avc:  denied  { search } for  pid=4750 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868701.257:38): arch=40000003 syscall=195 success=no exit=-13 a0=bf892840 a1=bf89389c a2=a000 a3=8397a10 items=0 ppid=3367 pid=4750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868701.257:39): avc:  denied  { search } for  pid=4750 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868701.257:39): arch=40000003 syscall=195 success=no exit=-13 a0=bf892840 a1=bf89389c a2=a000 a3=8397a10 items=0 ppid=3367 pid=4750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868701.257:40): avc:  denied  { search } for  pid=4750 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868701.257:40): arch=40000003 syscall=195 success=no exit=-13 a0=bf892840 a1=bf89389c a2=a000 a3=8397a10 items=0 ppid=3367 pid=4750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868712.257:41): avc:  denied  { search } for  pid=4792 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868712.257:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd8490 a1=bfcd94ec a2=a000 a3=9e7ba10 items=0 ppid=3367 pid=4792 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868712.257:42): avc:  denied  { search } for  pid=4792 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868712.257:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd8490 a1=bfcd94ec a2=a000 a3=9e7ba10 items=0 ppid=3367 pid=4792 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868712.257:43): avc:  denied  { search } for  pid=4792 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868712.257:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfcd8490 a1=bfcd94ec a2=a000 a3=9e7ba10 items=0 ppid=3367 pid=4792 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868734.757:44): avc:  denied  { search } for  pid=4810 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868734.757:44): arch=40000003 syscall=195 success=no exit=-13 a0=bffe9fa0 a1=bffeaffc a2=a000 a3=83e3a10 items=0 ppid=3367 pid=4810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868734.757:45): avc:  denied  { search } for  pid=4810 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868734.757:45): arch=40000003 syscall=195 success=no exit=-13 a0=bffe9fa0 a1=bffeaffc a2=a000 a3=83e3a10 items=0 ppid=3367 pid=4810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1185868734.757:46): avc:  denied  { search } for  pid=4810 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1185868734.757:46): arch=40000003 syscall=195 success=no exit=-13 a0=bffe9fa0 a1=bffeaffc a2=a000 a3=83e3a10 items=0 ppid=3367 pid=4810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_ACCT msg=audit(1185868861.757:47): user pid=5082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185868861.757:48): user pid=5082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185868861.757:49): login pid=5082 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185868862.257:50): user pid=5082 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185868862.257:51): user pid=5082 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185868862.257:52): user pid=5082 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185869122.755:53): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185869122.755:54): user pid=3073 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185869122.755:55): user pid=2762 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185869122.755:56): user pid=2762 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1185869123.755:57): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2468 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185869125.920:6887) auditd normal halt, sending auid=4294967295 pid=21361 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2039
>type=DAEMON_START msg=audit(1185869203.725:5695) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1976 res=success, auditd pid=1976
>type=CONFIG_CHANGE msg=audit(1185869203.347:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185869203.347:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185869203.847:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185869203.847:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185869210.845:10): user pid=2140 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185869215.345:11): avc:  denied  { read write } for  pid=2217 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=378 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185869215.345:11): arch=40000003 syscall=11 success=yes exit=0 a0=8059f060 a1=805a1740 a2=8059f1a0 a3=1 items=0 ppid=2212 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185869215.345:11):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185869215.345:12): avc:  denied  { read write } for  pid=2218 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=378 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185869215.345:12): arch=40000003 syscall=11 success=yes exit=0 a0=805a1a78 a1=805a1af8 a2=8059f1a0 a3=1 items=0 ppid=2212 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185869215.345:12):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185869231.345:13): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185869324.845:14): user pid=2689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185869324.845:15): user pid=2689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185869324.845:16): user pid=2689 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185869324.845:17): login pid=2689 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185869324.845:18): user pid=2689 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185869324.845:19): user pid=2689 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185869563.343:20): user pid=2689 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185869563.343:21): user pid=2689 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1185869566.343:22): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2406 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185869569.306:5696) auditd normal halt, sending auid=4294967295 pid=3506 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1976
>type=DAEMON_START msg=audit(1185869645.646:9281) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1961 res=success, auditd pid=1961
>type=CONFIG_CHANGE msg=audit(1185869645.338:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185869645.338:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1185869645.338:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1185869645.338:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1185869652.837:10): user pid=2125 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1185869656.836:11): avc:  denied  { read write } for  pid=2202 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185869656.836:11): arch=40000003 syscall=11 success=yes exit=0 a0=80440a78 a1=80440af8 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185869656.836:11):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185869656.836:12): avc:  denied  { read write } for  pid=2201 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185869656.836:12): arch=40000003 syscall=11 success=yes exit=0 a0=8043e060 a1=80440740 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185869656.836:12):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1185869673.333:13): user pid=2604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185869687.831:14): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185869687.831:15): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185869687.831:16): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185869687.831:17): login pid=2674 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185869687.831:18): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185869687.831:19): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185869828.810:20): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1185869828.810:21): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1185869828.810:22): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1185869828.810:23): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1185869896.799:24): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1185869896.799:25): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1185869896.799:26): login pid=2598 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1185869897.299:27): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1185869897.299:28): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1185869897.299:29): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1185869897.299:30): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1185869917.296:31): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185869917.296:32): user pid=3004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185869917.796:33): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185869917.796:34): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185869926.795:35): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185869926.795:36): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185869926.795:37): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185869926.795:38): login pid=2674 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185869926.795:39): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185869926.795:40): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185872461.908:41): user pid=4140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185872461.908:42): user pid=4140 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185872461.908:43): login pid=4140 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185872461.908:44): user pid=4140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185872461.908:45): user pid=4140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185872462.408:46): user pid=4140 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185875658.920:47): avc:  denied  { read write } for  pid=4846 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185875658.920:47): arch=40000003 syscall=11 success=yes exit=0 a0=8043e060 a1=80440740 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185875658.920:47):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185876061.359:48): user pid=4946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185876061.359:49): user pid=4946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185876061.359:50): login pid=4946 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185876061.359:51): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185876061.359:52): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185876061.359:53): user pid=4946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185876626.273:54): avc:  denied  { read write } for  pid=5177 comm="cleanup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_cleanup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185876626.273:54): arch=40000003 syscall=11 success=yes exit=0 a0=80440838 a1=804408f0 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=5177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185876626.273:54):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1185876626.273:55): avc:  denied  { read write } for  pid=5185 comm="local" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_local_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185876626.273:55): arch=40000003 syscall=11 success=yes exit=0 a0=804422b0 a1=80442320 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=5185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="local" exe="/usr/libexec/postfix/local" subj=system_u:system_r:postfix_local_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185876626.273:55):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185876771.751:56): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1185876771.751:57): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1185876771.751:58): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1185876771.751:59): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1185876971.220:60): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1185876971.220:61): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1185876971.220:62): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1185876971.220:63): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1185878949.442:64): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1185878949.442:65): user pid=6713 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1185878964.440:66): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1185878964.440:67): user pid=6852 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1185879661.865:68): user pid=7421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185879661.865:69): user pid=7421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185879661.865:70): login pid=7421 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185879661.865:71): user pid=7421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185879661.865:72): user pid=7421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185879661.865:73): user pid=7421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185881600.344:74): avc:  denied  { read write } for  pid=924 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185881600.344:74): arch=40000003 syscall=11 success=yes exit=0 a0=8043e060 a1=80440740 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185881600.344:74):  path="anon_inode:[eventpoll]"
>type=USER_AUTH msg=audit(1185883050.887:75): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1185883050.887:76): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1185883050.887:77): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1185883050.887:78): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1185883075.384:79): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1185883075.384:80): user pid=1215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1185883261.362:81): user pid=1434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185883261.362:82): user pid=1434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185883261.362:83): login pid=1434 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185883261.362:84): user pid=1434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185883261.362:85): user pid=1434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185883261.362:86): user pid=1434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185886861.292:87): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185886861.292:88): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185886861.292:89): login pid=2143 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185886861.292:90): user pid=2143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185886861.292:91): user pid=2143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185886861.292:92): user pid=2143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185887600.884:93): avc:  denied  { read write } for  pid=2353 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185887600.884:93): arch=40000003 syscall=11 success=yes exit=0 a0=8043e060 a1=80440740 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185887600.884:93):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185890461.847:94): user pid=2915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185890461.847:95): user pid=2915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185890461.847:96): login pid=2915 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185890461.847:97): user pid=2915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185890461.847:98): user pid=2915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185890461.847:99): user pid=2915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1185893601.380:100): avc:  denied  { read write } for  pid=3561 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1185893601.380:100): arch=40000003 syscall=11 success=yes exit=0 a0=8043e060 a1=80440740 a2=8043e1a0 a3=1 items=0 ppid=2197 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1185893601.380:100):  path="anon_inode:[eventpoll]"
>type=USER_ACCT msg=audit(1185894061.846:101): user pid=3643 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185894061.846:102): user pid=3643 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185894061.846:103): login pid=3643 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185894061.846:104): user pid=3643 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185894061.846:105): user pid=3643 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185894061.846:106): user pid=3643 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1185897661.799:107): user pid=4460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185897661.799:108): user pid=4460 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185897661.799:109): login pid=4460 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185897661.799:110): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185897661.799:111): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185897661.799:112): user pid=4460 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185897891.300:113): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1185897891.300:114): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1185897891.300:115): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1185897891.300:116): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1185898710.302:117): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1185898710.302:118): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1185898710.302:119): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1185898710.302:120): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_DISP msg=audit(1185899250.808:121): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1185899250.808:122): user pid=4517 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1185899265.308:123): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1185899265.308:124): user pid=4762 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1185899326.808:125): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185899326.808:126): user pid=2674 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185899329.308:127): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1185899329.308:128): user pid=2598 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1185899330.808:129): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2391 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1185899332.787:9282) auditd normal halt, sending auid=4294967295 pid=5694 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1961
>type=DAEMON_START msg=audit(1186144303.568:3692) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2021 res=success, auditd pid=2021
>type=CONFIG_CHANGE msg=audit(1186144303.582:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186144303.582:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1186144303.582:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186144303.582:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1186144310.580:10): user pid=2185 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1186144314.580:11): avc:  denied  { read write } for  pid=2261 comm="qmgr" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_qmgr_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1186144314.580:11): arch=40000003 syscall=11 success=yes exit=0 a0=8105fa98 a1=8105fb28 a2=8105d1a0 a3=1 items=0 ppid=2256 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="qmgr" exe="/usr/libexec/postfix/qmgr" subj=system_u:system_r:postfix_qmgr_t:s0 key=(null)
>type=AVC_PATH msg=audit(1186144314.580:11):  path="anon_inode:[eventpoll]"
>type=AVC msg=audit(1186144314.580:12): avc:  denied  { read write } for  pid=2260 comm="pickup" name="[eventpoll]" dev=anon_inodefs ino=377 scontext=system_u:system_r:postfix_pickup_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file
>type=SYSCALL msg=audit(1186144314.580:12): arch=40000003 syscall=11 success=yes exit=0 a0=8105d300 a1=8105f768 a2=8105d1a0 a3=1 items=0 ppid=2256 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="pickup" exe="/usr/libexec/postfix/pickup" subj=system_u:system_r:postfix_pickup_t:s0 key=(null)
>type=AVC_PATH msg=audit(1186144314.580:12):  path="anon_inode:[eventpoll]"
>type=USER_ERR msg=audit(1186144331.579:13): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186144344.578:14): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186144344.578:15): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186144344.578:16): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186144344.578:17): login pid=2744 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186144344.578:18): user pid=2744 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186144344.578:19): user pid=2744 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186144377.575:20): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1186144377.575:21): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1186144377.575:22): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1186144377.575:23): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1186144529.565:24): avc:  denied  { search } for  pid=3561 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144529.565:24): arch=40000003 syscall=195 success=no exit=-13 a0=bff98030 a1=bff9908c a2=a000 a3=835aa10 items=0 ppid=3351 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144530.564:25): avc:  denied  { search } for  pid=3561 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144530.564:25): arch=40000003 syscall=195 success=no exit=-13 a0=bff98030 a1=bff9908c a2=a000 a3=835aa10 items=0 ppid=3351 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144530.564:26): avc:  denied  { search } for  pid=3561 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144530.564:26): arch=40000003 syscall=195 success=no exit=-13 a0=bff98030 a1=bff9908c a2=a000 a3=835aa10 items=0 ppid=3351 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144539.564:27): avc:  denied  { search } for  pid=3567 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144539.564:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfb55b10 a1=bfb56b6c a2=a000 a3=96e8a10 items=0 ppid=3566 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144539.564:28): avc:  denied  { search } for  pid=3567 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144539.564:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfb55b10 a1=bfb56b6c a2=a000 a3=96e8a10 items=0 ppid=3566 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144539.564:29): avc:  denied  { search } for  pid=3567 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144539.564:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfb55b10 a1=bfb56b6c a2=a000 a3=96e8a10 items=0 ppid=3566 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144541.564:30): avc:  denied  { search } for  pid=3578 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144541.564:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdbc90 a1=bfcdccec a2=a000 a3=9fc5a10 items=0 ppid=3351 pid=3578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144541.564:31): avc:  denied  { search } for  pid=3578 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144541.564:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdbc90 a1=bfcdccec a2=a000 a3=9fc5a10 items=0 ppid=3351 pid=3578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144541.564:32): avc:  denied  { search } for  pid=3578 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144541.564:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfcdbc90 a1=bfcdccec a2=a000 a3=9fc5a10 items=0 ppid=3351 pid=3578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144542.564:33): avc:  denied  { search } for  pid=3579 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144542.564:33): arch=40000003 syscall=195 success=no exit=-13 a0=bff1ded0 a1=bff1ef2c a2=a000 a3=848fa10 items=0 ppid=3351 pid=3579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144542.564:34): avc:  denied  { search } for  pid=3579 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144542.564:34): arch=40000003 syscall=195 success=no exit=-13 a0=bff1ded0 a1=bff1ef2c a2=a000 a3=848fa10 items=0 ppid=3351 pid=3579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144542.564:35): avc:  denied  { search } for  pid=3579 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144542.564:35): arch=40000003 syscall=195 success=no exit=-13 a0=bff1ded0 a1=bff1ef2c a2=a000 a3=848fa10 items=0 ppid=3351 pid=3579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144545.563:36): avc:  denied  { search } for  pid=3581 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144545.563:36): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=9120a10 items=0 ppid=3351 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144545.563:37): avc:  denied  { search } for  pid=3581 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144545.563:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=9120a10 items=0 ppid=3351 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144545.563:38): avc:  denied  { search } for  pid=3581 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144545.563:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfcf04a0 a1=bfcf14fc a2=a000 a3=9120a10 items=0 ppid=3351 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144564.763:39): avc:  denied  { search } for  pid=3596 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144564.763:39): arch=40000003 syscall=195 success=no exit=-13 a0=bf8227d0 a1=bf82382c a2=a000 a3=8e44a10 items=0 ppid=3595 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144564.763:40): avc:  denied  { search } for  pid=3596 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144564.763:40): arch=40000003 syscall=195 success=no exit=-13 a0=bf8227d0 a1=bf82382c a2=a000 a3=8e44a10 items=0 ppid=3595 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144564.763:41): avc:  denied  { search } for  pid=3596 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144564.763:41): arch=40000003 syscall=195 success=no exit=-13 a0=bf8227d0 a1=bf82382c a2=a000 a3=8e44a10 items=0 ppid=3595 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144594.261:42): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144594.261:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfc66410 a1=bfc6746c a2=a000 a3=8e21a10 items=0 ppid=3351 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144594.761:43): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144594.761:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfc66410 a1=bfc6746c a2=a000 a3=8e21a10 items=0 ppid=3351 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144594.761:44): avc:  denied  { search } for  pid=3647 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144594.761:44): arch=40000003 syscall=195 success=no exit=-13 a0=bfc66410 a1=bfc6746c a2=a000 a3=8e21a10 items=0 ppid=3351 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1186144621.759:45): user pid=4813 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpcuser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1186144647.257:46): user pid=4835 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=tcpdump exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1186144647.257:47): user pid=4836 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=tcpdump exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/0 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1186144648.757:48): user pid=4838 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1186144648.757:49): user pid=4839 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1186144652.756:50): avc:  denied  { search } for  pid=4847 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144652.756:50): arch=40000003 syscall=195 success=no exit=-13 a0=bfbeeba0 a1=bfbefbfc a2=a000 a3=88a8a10 items=0 ppid=4846 pid=4847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144652.756:51): avc:  denied  { search } for  pid=4847 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144652.756:51): arch=40000003 syscall=195 success=no exit=-13 a0=bfbeeba0 a1=bfbefbfc a2=a000 a3=88a8a10 items=0 ppid=4846 pid=4847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144652.756:52): avc:  denied  { search } for  pid=4847 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144652.756:52): arch=40000003 syscall=195 success=no exit=-13 a0=bfbeeba0 a1=bfbefbfc a2=a000 a3=88a8a10 items=0 ppid=4846 pid=4847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AVC msg=audit(1186144666.755:53): user pid=2093 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1186144666.755:54): policy loaded auid=500
>type=SYSCALL msg=audit(1186144666.755:54): arch=40000003 syscall=4 success=yes exit=1576594 a0=4 a1=b7e32000 a2=180e92 a3=bfd98af8 items=0 ppid=4919 pid=4921 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=AVC msg=audit(1186144684.254:55): avc:  denied  { search } for  pid=5032 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144684.254:55): arch=40000003 syscall=195 success=no exit=-13 a0=bfbca380 a1=bfbcb3dc a2=a000 a3=9134a10 items=0 ppid=3351 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144684.254:56): avc:  denied  { search } for  pid=5032 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144684.254:56): arch=40000003 syscall=195 success=no exit=-13 a0=bfbca380 a1=bfbcb3dc a2=a000 a3=9134a10 items=0 ppid=3351 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144684.254:57): avc:  denied  { search } for  pid=5032 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144684.254:57): arch=40000003 syscall=195 success=no exit=-13 a0=bfbca380 a1=bfbcb3dc a2=a000 a3=9134a10 items=0 ppid=3351 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144689.754:58): avc:  denied  { search } for  pid=5078 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144689.754:58): arch=40000003 syscall=195 success=no exit=-13 a0=bfe02db0 a1=bfe03e0c a2=a000 a3=820aa10 items=0 ppid=3351 pid=5078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144689.754:59): avc:  denied  { search } for  pid=5078 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144689.754:59): arch=40000003 syscall=195 success=no exit=-13 a0=bfe02db0 a1=bfe03e0c a2=a000 a3=820aa10 items=0 ppid=3351 pid=5078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144689.754:60): avc:  denied  { search } for  pid=5078 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144689.754:60): arch=40000003 syscall=195 success=no exit=-13 a0=bfe02db0 a1=bfe03e0c a2=a000 a3=820aa10 items=0 ppid=3351 pid=5078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144698.753:61): avc:  denied  { search } for  pid=5092 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144698.753:61): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaa260 a1=bfaab2bc a2=a000 a3=87e3a10 items=0 ppid=5091 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144698.753:62): avc:  denied  { search } for  pid=5092 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144698.753:62): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaa260 a1=bfaab2bc a2=a000 a3=87e3a10 items=0 ppid=5091 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144698.753:63): avc:  denied  { search } for  pid=5092 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144698.753:63): arch=40000003 syscall=195 success=no exit=-13 a0=bfaaa260 a1=bfaab2bc a2=a000 a3=87e3a10 items=0 ppid=5091 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144713.752:64): avc:  denied  { search } for  pid=5098 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144713.752:64): arch=40000003 syscall=195 success=no exit=-13 a0=bf811fc0 a1=bf81301c a2=a000 a3=979aa10 items=0 ppid=5097 pid=5098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144713.752:65): avc:  denied  { search } for  pid=5098 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144713.752:65): arch=40000003 syscall=195 success=no exit=-13 a0=bf811fc0 a1=bf81301c a2=a000 a3=979aa10 items=0 ppid=5097 pid=5098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144713.752:66): avc:  denied  { search } for  pid=5098 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144713.752:66): arch=40000003 syscall=195 success=no exit=-13 a0=bf811fc0 a1=bf81301c a2=a000 a3=979aa10 items=0 ppid=5097 pid=5098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144720.752:67): avc:  denied  { search } for  pid=5106 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144720.752:67): arch=40000003 syscall=195 success=no exit=-13 a0=bfd44500 a1=bfd4555c a2=a000 a3=8e28a10 items=0 ppid=5105 pid=5106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144720.752:68): avc:  denied  { search } for  pid=5106 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144720.752:68): arch=40000003 syscall=195 success=no exit=-13 a0=bfd44500 a1=bfd4555c a2=a000 a3=8e28a10 items=0 ppid=5105 pid=5106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186144720.752:69): avc:  denied  { search } for  pid=5106 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186144720.752:69): arch=40000003 syscall=195 success=no exit=-13 a0=bfd44500 a1=bfd4555c a2=a000 a3=8e28a10 items=0 ppid=5105 pid=5106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1186145243.721:70): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1186145243.721:71): user pid=3046 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1186145250.721:72): user pid=2744 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186145250.721:73): user pid=2744 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_START msg=audit(1186145369.517:828) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2074 res=success, auditd pid=2074
>type=CONFIG_CHANGE msg=audit(1186145369.618:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186145369.618:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1186145369.645:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186145369.645:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1186145377.163:10): user pid=2238 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1186145394.948:11): user pid=2715 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186145407.369:12): user pid=2800 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186145407.374:13): user pid=2800 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186145407.375:14): user pid=2800 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186145407.381:15): login pid=2800 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186145407.431:16): user pid=2800 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186145407.433:17): user pid=2800 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186145497.413:18): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1186145497.414:19): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1186145497.515:20): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1186145497.515:21): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1186146061.200:22): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186146061.205:23): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186146061.206:24): login pid=3548 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186146061.211:25): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186146061.298:26): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186146061.299:27): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186149661.326:28): user pid=4394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186149661.328:29): user pid=4394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186149661.328:30): login pid=4394 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186149661.331:31): user pid=4394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186149661.337:32): user pid=4394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186149661.338:33): user pid=4394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186153261.366:34): user pid=7829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186153261.369:35): user pid=7829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186153261.369:36): login pid=7829 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186153261.374:37): user pid=7829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186153261.380:38): user pid=7829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186153261.380:39): user pid=7829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186156861.405:40): user pid=8645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186156861.407:41): user pid=8645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186156861.407:42): login pid=8645 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186156861.412:43): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186156861.418:44): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186156861.419:45): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186160461.439:46): user pid=9463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186160461.442:47): user pid=9463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186160461.443:48): login pid=9463 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186160461.448:49): user pid=9463 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186160461.453:50): user pid=9463 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186160461.453:51): user pid=9463 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186164061.474:52): user pid=10276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186164061.476:53): user pid=10276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186164061.476:54): login pid=10276 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186164061.481:55): user pid=10276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186164061.487:56): user pid=10276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186164061.487:57): user pid=10276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186167661.506:58): user pid=11093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186167661.507:59): user pid=11093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186167661.507:60): login pid=11093 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186167661.511:61): user pid=11093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186167661.518:62): user pid=11093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186167661.518:63): user pid=11093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186169882.380:64): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1186169882.384:65): user pid=3406 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1186169891.612:66): user pid=2800 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186169891.613:67): user pid=2800 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1186169896.682:68): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2503 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1186169899.887:829) auditd normal halt, sending auid=4294967295 pid=11882 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2074
>type=DAEMON_START msg=audit(1186573110.584:4814) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2049 res=success, auditd pid=2049
>type=CONFIG_CHANGE msg=audit(1186573110.685:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186573110.685:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1186573110.718:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186573110.718:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1186573118.314:10): user pid=2213 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1186573137.964:11): user pid=2690 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186573158.739:12): user pid=2775 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186573158.744:13): user pid=2775 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186573158.745:14): user pid=2775 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186573158.749:15): login pid=2775 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186573158.823:16): user pid=2775 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186573158.826:17): user pid=2775 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186573196.715:18): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1186573196.716:19): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1186573196.947:20): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1186573197.055:21): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1186573283.795:22): avc:  denied  { search } for  pid=3529 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573283.795:22): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd9e40 a1=bfbdae9c a2=a000 a3=9c5ea10 items=0 ppid=3282 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573284.894:23): avc:  denied  { search } for  pid=3529 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573284.894:23): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd9e40 a1=bfbdae9c a2=a000 a3=9c5ea10 items=0 ppid=3282 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573285.328:24): avc:  denied  { search } for  pid=3529 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573285.328:24): arch=40000003 syscall=195 success=no exit=-13 a0=bfbd9e40 a1=bfbdae9c a2=a000 a3=9c5ea10 items=0 ppid=3282 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573286.259:25): avc:  denied  { search } for  pid=3531 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573286.259:25): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d7990 a1=bf9d89ec a2=a000 a3=9407a10 items=0 ppid=3282 pid=3531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573286.266:26): avc:  denied  { search } for  pid=3531 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573286.266:26): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d7990 a1=bf9d89ec a2=a000 a3=9407a10 items=0 ppid=3282 pid=3531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573286.269:27): avc:  denied  { search } for  pid=3531 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573286.269:27): arch=40000003 syscall=195 success=no exit=-13 a0=bf9d7990 a1=bf9d89ec a2=a000 a3=9407a10 items=0 ppid=3282 pid=3531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1186573295.093:28): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186573295.094:29): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1186573295.127:30): avc:  denied  { search } for  pid=3597 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573295.127:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfaebaa0 a1=bfaecafc a2=a000 a3=9102a10 items=0 ppid=3282 pid=3597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573295.134:31): avc:  denied  { search } for  pid=3597 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573295.134:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfaebaa0 a1=bfaecafc a2=a000 a3=9102a10 items=0 ppid=3282 pid=3597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573295.137:32): avc:  denied  { search } for  pid=3597 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573295.137:32): arch=40000003 syscall=195 success=no exit=-13 a0=bfaebaa0 a1=bfaecafc a2=a000 a3=9102a10 items=0 ppid=3282 pid=3597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_START msg=audit(1186573295.148:33): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1186573295.148:34): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1186573300.359:35): avc:  denied  { search } for  pid=3638 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573300.359:35): arch=40000003 syscall=195 success=no exit=-13 a0=bfc9d450 a1=bfc9e4ac a2=a000 a3=8658a10 items=0 ppid=3282 pid=3638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573300.688:36): avc:  denied  { search } for  pid=3638 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573300.688:36): arch=40000003 syscall=195 success=no exit=-13 a0=bfc9d450 a1=bfc9e4ac a2=a000 a3=8658a10 items=0 ppid=3282 pid=3638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573300.691:37): avc:  denied  { search } for  pid=3638 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573300.691:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfc9d450 a1=bfc9e4ac a2=a000 a3=8658a10 items=0 ppid=3282 pid=3638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573320.032:38): avc:  denied  { search } for  pid=3673 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573320.032:38): arch=40000003 syscall=195 success=no exit=-13 a0=bfe3f450 a1=bfe404ac a2=a000 a3=91aaa10 items=0 ppid=3282 pid=3673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573320.039:39): avc:  denied  { search } for  pid=3673 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573320.039:39): arch=40000003 syscall=195 success=no exit=-13 a0=bfe3f450 a1=bfe404ac a2=a000 a3=91aaa10 items=0 ppid=3282 pid=3673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573320.042:40): avc:  denied  { search } for  pid=3673 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573320.042:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfe3f450 a1=bfe404ac a2=a000 a3=91aaa10 items=0 ppid=3282 pid=3673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573322.850:41): avc:  denied  { search } for  pid=3675 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573322.850:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfe951d0 a1=bfe9622c a2=a000 a3=818ca10 items=0 ppid=3282 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573322.856:42): avc:  denied  { search } for  pid=3675 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573322.856:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfe951d0 a1=bfe9622c a2=a000 a3=818ca10 items=0 ppid=3282 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573322.860:43): avc:  denied  { search } for  pid=3675 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573322.860:43): arch=40000003 syscall=195 success=no exit=-13 a0=bfe951d0 a1=bfe9622c a2=a000 a3=818ca10 items=0 ppid=3282 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573325.567:44): avc:  denied  { search } for  pid=3681 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573325.567:44): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8d340 a1=bfb8e39c a2=a000 a3=a028a10 items=0 ppid=3282 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573325.574:45): avc:  denied  { search } for  pid=3681 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573325.574:45): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8d340 a1=bfb8e39c a2=a000 a3=a028a10 items=0 ppid=3282 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186573325.577:46): avc:  denied  { search } for  pid=3681 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186573325.577:46): arch=40000003 syscall=195 success=no exit=-13 a0=bfb8d340 a1=bfb8e39c a2=a000 a3=a028a10 items=0 ppid=3282 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1186574273.579:47): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1186574273.582:48): user pid=3248 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1186574461.686:49): user pid=21548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186574461.691:50): user pid=21548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186574461.692:51): login pid=21548 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186574461.697:52): user pid=21548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186574461.776:53): user pid=21548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186574461.778:54): user pid=21548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186577425.785:55): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1186577425.790:56): user pid=3594 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186578061.805:57): user pid=22613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186578061.808:58): user pid=22613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186578061.809:59): login pid=22613 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186578061.812:60): user pid=22613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186578061.818:61): user pid=22613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186578061.819:62): user pid=22613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186581661.981:63): user pid=28723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186581661.990:64): user pid=28723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186581661.991:65): login pid=28723 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186581662.030:66): user pid=28723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186581662.042:67): user pid=28723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186581662.043:68): user pid=28723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186585261.067:69): user pid=23286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186585261.071:70): user pid=23286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186585261.071:71): login pid=23286 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186585261.074:72): user pid=23286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186585261.080:73): user pid=23286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186585261.081:74): user pid=23286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1186586437.488:75): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1186586437.489:76): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1186586437.624:77): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1186586437.636:78): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_DISP msg=audit(1186586438.756:79): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1186586438.799:80): user pid=23629 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1186588861.104:81): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186588861.107:82): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186588861.108:83): login pid=27158 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186588861.113:84): user pid=27158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186588861.118:85): user pid=27158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186588861.118:86): user pid=27158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186589781.724:87): user pid=2775 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186589781.725:88): user pid=2775 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1186589785.961:89): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2478 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1186589789.742:4815) auditd normal halt, sending auid=4294967295 pid=31278 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2049
>type=DAEMON_START msg=audit(1186738641.568:2776) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1967 res=success, auditd pid=1967
>type=CONFIG_CHANGE msg=audit(1186738641.669:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186738641.669:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1186738641.701:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186738641.701:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1186738649.132:10): user pid=2131 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1186738669.514:11): user pid=2607 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186738681.903:12): user pid=2719 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186738681.907:13): user pid=2719 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186738681.908:14): user pid=2719 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186738681.914:15): login pid=2719 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186738682.022:16): user pid=2719 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186738682.023:17): user pid=2719 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186738730.392:18): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186738730.393:19): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1186738730.526:20): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1186738730.526:21): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1186738774.288:22): avc:  denied  { search } for  pid=3452 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738774.288:22): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b7fd0 a1=bf8b902c a2=a000 a3=923aa10 items=0 ppid=3293 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186738775.354:23): avc:  denied  { search } for  pid=3452 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738775.354:23): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b7fd0 a1=bf8b902c a2=a000 a3=923aa10 items=0 ppid=3293 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186738775.743:24): avc:  denied  { search } for  pid=3452 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738775.743:24): arch=40000003 syscall=195 success=no exit=-13 a0=bf8b7fd0 a1=bf8b902c a2=a000 a3=923aa10 items=0 ppid=3293 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186738780.487:25): avc:  denied  { search } for  pid=3478 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738780.487:25): arch=40000003 syscall=195 success=no exit=-13 a0=bfb4bb00 a1=bfb4cb5c a2=a000 a3=90e4a10 items=0 ppid=3293 pid=3478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186738780.494:26): avc:  denied  { search } for  pid=3478 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738780.494:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfb4bb00 a1=bfb4cb5c a2=a000 a3=90e4a10 items=0 ppid=3293 pid=3478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1186738780.497:27): avc:  denied  { search } for  pid=3478 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1186738780.497:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfb4bb00 a1=bfb4cb5c a2=a000 a3=90e4a10 items=0 ppid=3293 pid=3478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1186738962.868:28): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1186738962.869:29): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1186738962.960:30): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1186738962.961:31): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1186738975.714:32): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1186738975.771:33): user pid=3559 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1186740061.117:34): user pid=4957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186740061.124:35): user pid=4957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186740061.124:36): login pid=4957 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186740061.131:37): user pid=4957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186740061.215:38): user pid=4957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186740061.216:39): user pid=4957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186743661.240:40): user pid=7087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186743661.244:41): user pid=7087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186743661.244:42): login pid=7087 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186743661.248:43): user pid=7087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186743661.254:44): user pid=7087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186743661.255:45): user pid=7087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186747261.577:46): user pid=8365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186747261.583:47): user pid=8365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186747261.584:48): login pid=8365 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186747261.590:49): user pid=8365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186747261.599:50): user pid=8365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186747261.600:51): user pid=8365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186750861.625:52): user pid=9283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186750861.628:53): user pid=9283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186750861.629:54): login pid=9283 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186750861.633:55): user pid=9283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186750861.638:56): user pid=9283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186750861.638:57): user pid=9283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186754461.659:58): user pid=10294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186754461.661:59): user pid=10294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186754461.661:60): login pid=10294 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186754461.666:61): user pid=10294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186754461.672:62): user pid=10294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186754461.673:63): user pid=10294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186758061.694:64): user pid=11926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186758061.696:65): user pid=11926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186758061.696:66): login pid=11926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186758061.701:67): user pid=11926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186758061.710:68): user pid=11926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186758061.710:69): user pid=11926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186761661.730:70): user pid=12793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186761661.732:71): user pid=12793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186761661.732:72): login pid=12793 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186761661.736:73): user pid=12793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186761661.742:74): user pid=12793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186761661.742:75): user pid=12793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186765261.765:76): user pid=15113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186765261.769:77): user pid=15113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186765261.769:78): login pid=15113 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186765261.775:79): user pid=15113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186765261.781:80): user pid=15113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186765261.781:81): user pid=15113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186768861.807:82): user pid=16004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186768861.810:83): user pid=16004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186768861.810:84): login pid=16004 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186768861.814:85): user pid=16004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186768861.818:86): user pid=16004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186768861.819:87): user pid=16004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186770898.756:88): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1186770898.760:89): user pid=3256 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186772461.841:90): user pid=16954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186772461.845:91): user pid=16954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186772461.846:92): login pid=16954 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186772461.852:93): user pid=16954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186772461.858:94): user pid=16954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186772461.859:95): user pid=16954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186774074.538:96): user pid=2719 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186774074.538:97): user pid=2719 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1186774077.492:98): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2396 comm="dhcdbd" sig=6
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1186774078.622:99): avc:  denied  { write } for  pid=17565 comm="umount" lport=7001 scontext=system_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1186774078.622:99): arch=40000003 syscall=22 success=yes exit=0 a0=94e9278 a1=bff98980 a2=94e9288 a3=94e9279 items=0 ppid=17555 pid=17565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null)
>type=DAEMON_END msg=audit(1186774191.057:2777) auditd normal halt, sending auid=4294967295 pid=17655 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1967
>type=DAEMON_START msg=audit(1186928895.921:5433) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1881 res=success, auditd pid=1881
>type=CONFIG_CHANGE msg=audit(1186928896.021:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186928896.021:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1186928896.054:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1186928896.054:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1186928903.518:10): user pid=2045 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1186928923.068:11): user pid=2522 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186928936.716:12): user pid=2616 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186928936.718:13): user pid=2616 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186928936.718:14): user pid=2616 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186928936.721:15): login pid=2616 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186928936.818:16): user pid=2616 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186928936.820:17): user pid=2616 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186930243.137:18): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1186930243.138:19): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1186930243.268:20): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1186930243.268:21): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1186930861.252:22): user pid=3570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186930861.258:23): user pid=3570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186930861.258:24): login pid=3570 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186930861.266:25): user pid=3570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186930861.351:26): user pid=3570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186930861.351:27): user pid=3570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186934461.376:28): user pid=4369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186934461.380:29): user pid=4369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186934461.381:30): login pid=4369 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186934461.387:31): user pid=4369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186934461.396:32): user pid=4369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186934461.396:33): user pid=4369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186938061.423:34): user pid=5269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186938061.430:35): user pid=5269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186938061.431:36): login pid=5269 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186938061.436:37): user pid=5269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186938061.443:38): user pid=5269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186938061.444:39): user pid=5269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1186941661.464:40): user pid=5956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1186941661.467:41): user pid=5956 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1186941661.467:42): login pid=5956 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1186941661.472:43): user pid=5956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1186941661.477:44): user pid=5956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1186941661.477:45): user pid=5956 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1186942897.250:46): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186942897.251:47): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1186942897.261:48): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1186942897.261:49): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1186942928.918:50): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1186942928.919:51): user pid=6208 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1186943161.302:52): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1186943161.303:53): user pid=3374 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1186943168.226:54): user pid=2616 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186943168.226:55): user pid=2616 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1186943171.432:56): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2311 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1186943173.069:5434) auditd normal halt, sending auid=4294967295 pid=6701 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1881
>type=DAEMON_START msg=audit(1187097090.567:4690) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1953 res=success, auditd pid=1953
>type=CONFIG_CHANGE msg=audit(1187097090.667:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187097090.667:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187097090.700:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187097090.700:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1187097098.188:10): user pid=2119 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1187097118.025:11): user pid=2595 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187097129.869:12): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187097129.874:13): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187097129.875:14): user pid=2704 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187097129.880:15): login pid=2704 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187097129.971:16): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187097129.975:17): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187099681.353:18): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1187099681.353:19): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1187099681.655:20): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1187099681.656:21): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1187099717.930:22): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1187099717.932:23): user pid=3807 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1187100061.981:24): user pid=4121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187100061.987:25): user pid=4121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187100061.987:26): login pid=4121 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187100062.011:27): user pid=4121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187100062.101:28): user pid=4121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187100062.102:29): user pid=4121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187103661.125:30): user pid=5860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187103661.126:31): user pid=5860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187103661.127:32): login pid=5860 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187103661.131:33): user pid=5860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187103661.136:34): user pid=5860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187103661.136:35): user pid=5860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187107261.166:36): user pid=6926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187107261.169:37): user pid=6926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187107261.169:38): login pid=6926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187107261.175:39): user pid=6926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187107261.186:40): user pid=6926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187107261.186:41): user pid=6926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187110861.206:42): user pid=7806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187110861.209:43): user pid=7806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187110861.209:44): login pid=7806 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187110861.214:45): user pid=7806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187110861.219:46): user pid=7806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187110861.220:47): user pid=7806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187114461.243:48): user pid=8645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187114461.245:49): user pid=8645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187114461.245:50): login pid=8645 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187114461.249:51): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187114461.254:52): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187114461.254:53): user pid=8645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187118061.276:54): user pid=9509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187118061.277:55): user pid=9509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187118061.277:56): login pid=9509 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187118061.283:57): user pid=9509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187118061.291:58): user pid=9509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187118061.291:59): user pid=9509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187121661.314:60): user pid=10323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187121661.316:61): user pid=10323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187121661.316:62): login pid=10323 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187121661.320:63): user pid=10323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187121661.327:64): user pid=10323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187121661.328:65): user pid=10323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1187123493.485:66): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187123493.486:67): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1187123493.585:68): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1187123493.586:69): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1187123499.878:70): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187123499.881:71): user pid=10920 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187123504.254:72): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187123504.254:73): user pid=2704 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1187123508.470:74): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2384 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1187123510.454:4691) auditd normal halt, sending auid=4294967295 pid=11355 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1953
>type=DAEMON_START msg=audit(1187169778.572:2930) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1954 res=success, auditd pid=1954
>type=CONFIG_CHANGE msg=audit(1187169778.672:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187169778.672:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187169778.705:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187169778.705:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1187169786.114:10): user pid=2118 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1187169805.920:11): user pid=2594 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187169822.450:12): user pid=2703 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187169822.453:13): user pid=2703 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187169822.454:14): user pid=2703 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187169822.457:15): login pid=2703 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187169822.528:16): user pid=2703 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187169822.531:17): user pid=2703 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187171423.786:18): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1187171423.787:19): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1187171423.924:20): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1187171423.925:21): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1187171432.036:22): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1187171432.037:23): user pid=3568 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1187172061.696:24): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187172061.704:25): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187172061.704:26): login pid=3848 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187172061.711:27): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187172061.772:28): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187172061.773:29): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187175661.795:30): user pid=4809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187175661.800:31): user pid=4809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187175661.800:32): login pid=4809 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187175661.806:33): user pid=4809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187175661.813:34): user pid=4809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187175661.814:35): user pid=4809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1187176461.853:36): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1187176461.854:37): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1187176461.912:38): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=CRED_ACQ msg=audit(1187176461.913:39): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=AVC msg=audit(1187176578.976:40): avc:  denied  { search } for  pid=5515 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176578.976:40): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc8ad0 a1=bfcc9b2c a2=a000 a3=9597a10 items=0 ppid=5103 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176579.987:41): avc:  denied  { search } for  pid=5515 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176579.987:41): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc8ad0 a1=bfcc9b2c a2=a000 a3=9597a10 items=0 ppid=5103 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176580.276:42): avc:  denied  { search } for  pid=5515 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176580.276:42): arch=40000003 syscall=195 success=no exit=-13 a0=bfcc8ad0 a1=bfcc9b2c a2=a000 a3=9597a10 items=0 ppid=5103 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176596.420:43): avc:  denied  { search } for  pid=5641 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176596.420:43): arch=40000003 syscall=195 success=no exit=-13 a0=bff076b0 a1=bff0870c a2=a000 a3=8317a10 items=0 ppid=5103 pid=5641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176596.427:44): avc:  denied  { search } for  pid=5641 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176596.427:44): arch=40000003 syscall=195 success=no exit=-13 a0=bff076b0 a1=bff0870c a2=a000 a3=8317a10 items=0 ppid=5103 pid=5641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176596.430:45): avc:  denied  { search } for  pid=5641 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176596.430:45): arch=40000003 syscall=195 success=no exit=-13 a0=bff076b0 a1=bff0870c a2=a000 a3=8317a10 items=0 ppid=5103 pid=5641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176598.488:46): avc:  denied  { search } for  pid=5642 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176598.488:46): arch=40000003 syscall=195 success=no exit=-13 a0=bff64f10 a1=bff65f6c a2=a000 a3=9b7fa10 items=0 ppid=5103 pid=5642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176598.505:47): avc:  denied  { search } for  pid=5642 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176598.505:47): arch=40000003 syscall=195 success=no exit=-13 a0=bff64f10 a1=bff65f6c a2=a000 a3=9b7fa10 items=0 ppid=5103 pid=5642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176598.511:48): avc:  denied  { search } for  pid=5642 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176598.511:48): arch=40000003 syscall=195 success=no exit=-13 a0=bff64f10 a1=bff65f6c a2=a000 a3=9b7fa10 items=0 ppid=5103 pid=5642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176599.284:49): avc:  denied  { search } for  pid=5643 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176599.284:49): arch=40000003 syscall=195 success=no exit=-13 a0=bfc59410 a1=bfc5a46c a2=a000 a3=8e23a10 items=0 ppid=5103 pid=5643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176599.290:50): avc:  denied  { search } for  pid=5643 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176599.290:50): arch=40000003 syscall=195 success=no exit=-13 a0=bfc59410 a1=bfc5a46c a2=a000 a3=8e23a10 items=0 ppid=5103 pid=5643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176599.294:51): avc:  denied  { search } for  pid=5643 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176599.294:51): arch=40000003 syscall=195 success=no exit=-13 a0=bfc59410 a1=bfc5a46c a2=a000 a3=8e23a10 items=0 ppid=5103 pid=5643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=USER_AVC msg=audit(1187176620.768:52): user pid=2026 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1187176620.714:53): policy loaded auid=500
>type=SYSCALL msg=audit(1187176620.714:53): arch=40000003 syscall=4 success=yes exit=1563358 a0=4 a1=b7dc7000 a2=17dade a3=bf9e9e48 items=0 ppid=5655 pid=5657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1187176638.545:54): user pid=5856 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpcuser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/6 res=failed)'
>type=AVC msg=audit(1187176677.801:55): avc:  denied  { search } for  pid=7278 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176677.801:55): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3d1f0 a1=bfa3e24c a2=a000 a3=848ba10 items=0 ppid=5103 pid=7278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176677.830:56): avc:  denied  { search } for  pid=7278 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176677.830:56): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3d1f0 a1=bfa3e24c a2=a000 a3=848ba10 items=0 ppid=5103 pid=7278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176677.858:57): avc:  denied  { search } for  pid=7278 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176677.858:57): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3d1f0 a1=bfa3e24c a2=a000 a3=848ba10 items=0 ppid=5103 pid=7278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1187176680.133:58): user pid=7300 uid=0 auid=500 subj=user_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1187176682.879:59): avc:  denied  { search } for  pid=7347 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176682.879:59): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc9580 a1=bfdca5dc a2=a000 a3=8f11a10 items=0 ppid=5103 pid=7347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176682.889:60): avc:  denied  { search } for  pid=7347 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176682.889:60): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc9580 a1=bfdca5dc a2=a000 a3=8f11a10 items=0 ppid=5103 pid=7347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187176682.893:61): avc:  denied  { search } for  pid=7347 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187176682.893:61): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc9580 a1=bfdca5dc a2=a000 a3=8f11a10 items=0 ppid=5103 pid=7347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1187176695.852:62): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1187176695.855:63): user pid=5069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1187179261.979:64): user pid=10772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187179261.987:65): user pid=10772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187179261.988:66): login pid=10772 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187179261.994:67): user pid=10772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187179262.023:68): user pid=10772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187179262.024:69): user pid=10772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187182861.048:70): user pid=5029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187182861.050:71): user pid=5029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187182861.050:72): login pid=5029 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187182861.054:73): user pid=5029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187182861.062:74): user pid=5029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187182861.063:75): user pid=5029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187186461.086:76): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187186461.089:77): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187186461.090:78): login pid=5937 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187186461.095:79): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187186461.104:80): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187186461.104:81): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187190061.127:82): user pid=6862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187190061.128:83): user pid=6862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187190061.128:84): login pid=6862 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187190061.132:85): user pid=6862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187190061.137:86): user pid=6862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187190061.137:87): user pid=6862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187193661.164:88): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187193661.167:89): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187193661.167:90): login pid=8113 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187193661.170:91): user pid=8113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187193661.237:92): user pid=8113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187193661.238:93): user pid=8113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1187195639.041:94): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187195639.042:95): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1187195639.143:96): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1187195639.144:97): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=AVC msg=audit(1187195641.936:98): avc:  denied  { write } for  pid=9816 comm="umount" lport=7001 scontext=user_u:system_r:mount_t:s0 tcontext=user_u:system_r:initrc_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1187195641.936:98): arch=40000003 syscall=22 success=yes exit=0 a0=8a72278 a1=bfc99780 a2=8a72288 a3=8a72279 items=0 ppid=9811 pid=9816 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="umount" exe="/bin/umount" subj=user_u:system_r:mount_t:s0 key=(null)
>type=CRED_DISP msg=audit(1187195677.951:99): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187195677.952:100): user pid=9770 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187195684.290:101): user pid=2703 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187195684.290:102): user pid=2703 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1187195688.427:103): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2383 comm="dhcdbd" sig=6
>type=DAEMON_END msg=audit(1187195690.543:2931) auditd normal halt, sending auid=4294967295 pid=10210 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1954
>type=DAEMON_START msg=audit(1187341622.604:1110) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1950 res=success, auditd pid=1950
>type=CONFIG_CHANGE msg=audit(1187341622.707:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187341622.707:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1187341622.729:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1187341622.729:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1187341630.124:9): user pid=2114 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=lwpdc uri=socket://lwpdc.pdc.kth.se:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ERR msg=audit(1187341649.675:10): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187341739.948:11): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187341739.949:12): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187341744.825:13): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187341744.828:14): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187341744.829:15): user pid=2700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187341744.834:16): login pid=2700 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187341744.939:17): user pid=2700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=init : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187341744.939:18): user pid=2700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=tyrannosaurus, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187341798.563:19): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1187341798.564:20): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1187341798.729:21): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1187341798.730:22): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=AVC msg=audit(1187341847.351:23): avc:  denied  { search } for  pid=3383 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341847.351:23): arch=40000003 syscall=195 success=no exit=-13 a0=bf920ab0 a1=bf921b0c a2=a000 a3=88e7a10 items=0 ppid=3219 pid=3383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341848.662:24): avc:  denied  { search } for  pid=3383 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341848.662:24): arch=40000003 syscall=195 success=no exit=-13 a0=bf920ab0 a1=bf921b0c a2=a000 a3=88e7a10 items=0 ppid=3219 pid=3383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341849.017:25): avc:  denied  { search } for  pid=3383 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341849.017:25): arch=40000003 syscall=195 success=no exit=-13 a0=bf920ab0 a1=bf921b0c a2=a000 a3=88e7a10 items=0 ppid=3219 pid=3383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341850.632:26): avc:  denied  { search } for  pid=3416 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341850.632:26): arch=40000003 syscall=195 success=no exit=-13 a0=bfbc8b80 a1=bfbc9bdc a2=a000 a3=8832a10 items=0 ppid=3219 pid=3416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341850.639:27): avc:  denied  { search } for  pid=3416 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341850.639:27): arch=40000003 syscall=195 success=no exit=-13 a0=bfbc8b80 a1=bfbc9bdc a2=a000 a3=8832a10 items=0 ppid=3219 pid=3416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341850.642:28): avc:  denied  { search } for  pid=3416 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341850.642:28): arch=40000003 syscall=195 success=no exit=-13 a0=bfbc8b80 a1=bfbc9bdc a2=a000 a3=8832a10 items=0 ppid=3219 pid=3416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341885.295:29): avc:  denied  { search } for  pid=3472 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341885.295:29): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3cc20 a1=bfa3dc7c a2=a000 a3=8c26a10 items=0 ppid=3219 pid=3472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341885.302:30): avc:  denied  { search } for  pid=3472 comm="ldconfig" name="bin" dev=sda8 ino=1507344 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341885.302:30): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3cc20 a1=bfa3dc7c a2=a000 a3=8c26a10 items=0 ppid=3219 pid=3472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=AVC msg=audit(1187341885.305:31): avc:  denied  { search } for  pid=3472 comm="ldconfig" name="bin" dev=sda8 ino=1507408 scontext=user_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=SYSCALL msg=audit(1187341885.305:31): arch=40000003 syscall=195 success=no exit=-13 a0=bfa3cc20 a1=bfa3dc7c a2=a000 a3=8c26a10 items=0 ppid=3219 pid=3472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=user_u:system_r:ldconfig_t:s0 key=(null)
>type=CRED_DISP msg=audit(1187341898.006:32): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1187341898.009:33): user pid=3185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1187342667.220:34): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1187342667.221:35): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1187342667.240:36): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1187342667.240:37): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_DISP msg=audit(1187342674.721:38): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_END msg=audit(1187342674.723:39): user pid=4006 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1187344861.318:40): user pid=4658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187344861.324:41): user pid=4658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187344861.324:42): login pid=4658 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187344861.329:43): user pid=4658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187344861.395:44): user pid=4658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187344861.395:45): user pid=4658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1187348461.418:46): user pid=5595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1187348461.423:47): user pid=5595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1187348461.423:48): login pid=5595 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1187348461.428:49): user pid=5595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1187348461.434:50): user pid=5595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1187348461.434:51): user pid=5595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1187351531.103:52): user pid=6795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_ACCT msg=audit(1187351531.104:53): user pid=6795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=USER_START msg=audit(1187351531.113:54): user pid=6795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'
>type=CRED_ACQ msg=audit(1187351531.113:55): user pid=6795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)'

Actions: View

Attachments on bug 243658: 161727