Attachment 161982 Details for Bug 253636 – /var/log/audit/audit.log

/var/log/audit/audit.log

audit.log (text/plain), 478.45 KB, created by LannyM on 2007-08-21 14:46:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: LannyM

Created: 2007-08-21 14:46:06 UTC

Size: 478.45 KB

patch

obsolete

>type=DAEMON_START msg=audit(1185832281.369:1511) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1928 res=success, auditd pid=1928
>type=CONFIG_CHANGE msg=audit(1185832281.468:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1185832281.507:6): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=MAC_STATUS msg=audit(1185832373.890:7): enforcing=0 old_enforcing=1 auid=4294967295
>type=SYSCALL msg=audit(1185832373.890:7): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd91234 a2=1 a3=bfd91234 items=0 ppid=2730 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:firstboot_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1185832380.000:8): user pid=2750 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ERR msg=audit(1185832466.292:9): user pid=2796 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185832485.532:10): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185832485.535:11): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185832485.539:12): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185832485.544:13): login pid=2887 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185832485.574:14): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185832485.577:15): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185832632.478:16): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185832632.482:17): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185832862.043:18): user pid=3251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185832862.050:19): user pid=3251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185832862.052:20): login pid=3251 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185832862.059:21): user pid=3251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185832862.099:22): user pid=3251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185832862.101:23): user pid=3251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1185833159.075:24): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185833159.078:25): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185833159.082:26): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185833159.088:27): login pid=2887 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185833159.117:28): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185833159.120:29): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185833211.920:30): user pid=3450 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185833211.922:31): user pid=3450 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185833211.976:32): user pid=3450 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1185834942.582:33): user pid=3562 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185834942.584:34): user pid=3562 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185834942.604:35): user pid=3562 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185835063.359:36): user pid=3562 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185835892.220:37): user pid=3450 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185836461.635:38): user pid=640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185836461.640:39): user pid=640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185836461.642:40): login pid=640 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185836461.655:41): user pid=640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185836461.693:42): user pid=640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185836461.695:43): user pid=640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185839228.209:44): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185839228.225:45): user pid=2887 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185839249.496:46): user pid=31578 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185839249.654:47): user pid=31578 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185839249.656:48): user pid=31578 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185839249.677:49): login pid=31578 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185839249.787:50): user pid=31578 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185839249.790:51): user pid=31578 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185839658.451:52): user pid=31895 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185839658.453:53): user pid=31895 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185839658.509:54): user pid=31895 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185839674.472:55): user pid=31895 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185839683.750:56): user pid=31578 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185839683.752:57): user pid=31578 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185839698.094:58): user pid=31924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185839698.097:59): user pid=31924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185839698.100:60): user pid=31924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185839698.105:61): login pid=31924 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185839698.128:62): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185839698.131:63): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185840021.536:64): user pid=32619 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1185840061.520:65): user pid=371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185840061.527:66): user pid=371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185840061.528:67): login pid=371 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185840061.535:68): user pid=371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185840061.653:69): user pid=371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185840061.656:70): user pid=371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185840133.800:71): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185840133.801:72): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185840154.119:73): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185840154.122:74): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=mailing-lists: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185840163.075:75): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185840163.077:76): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185840163.080:77): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185840163.088:78): login pid=31924 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1185840163.090:79): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185840163.092:80): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185840206.500:81): user pid=628 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185840206.501:82): user pid=628 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185840206.550:83): user pid=628 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185840394.095:84): user pid=628 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185840413.158:85): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185840413.160:86): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185840427.620:87): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185840427.622:88): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185840466.974:89): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185840466.977:90): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185840466.979:91): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185840466.986:92): login pid=31924 uid=0 old auid=0 new auid=503
>type=USER_START msg=audit(1185840467.030:93): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185840467.033:94): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185842320.237:95): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185842320.239:96): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185842331.509:97): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185842331.512:98): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185842331.514:99): user pid=31924 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185842331.520:100): login pid=31924 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1185842331.562:101): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185842331.564:102): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185842624.068:103): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185842624.070:104): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185842641.703:105): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185842641.706:106): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185842641.708:107): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185842641.714:108): login pid=31924 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1185842641.716:109): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185842641.718:110): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185843040.066:111): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185843040.067:112): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185843052.428:113): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185843052.430:114): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185843052.432:115): user pid=31924 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185843052.437:116): login pid=31924 uid=0 old auid=0 new auid=500
>type=USER_START msg=audit(1185843052.464:117): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185843052.465:118): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185843661.908:119): user pid=2750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1185843661.917:120): user pid=2750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1185843661.918:121): login pid=2750 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185843661.926:122): user pid=2750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1185843662.055:123): user pid=2750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185843662.059:124): user pid=2750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1185843699.625:125): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185843699.644:126): user pid=31924 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1185843721.995:1512) auditd normal halt, sending auid=4294967295 pid=3840 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1928
>type=DAEMON_START msg=audit(1185877886.343:4081) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1936 res=success, auditd pid=1936
>type=CONFIG_CHANGE msg=audit(1185877886.442:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1185877886.475:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1185877907.735:6): user pid=2545 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185877926.840:7): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185877926.843:8): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185877926.845:9): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185877926.849:10): login pid=2627 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1185877926.851:11): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185877926.853:12): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185878073.078:13): user pid=2901 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185878073.080:14): user pid=2901 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185878073.138:15): user pid=2901 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185878167.451:16): user pid=2901 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1185878231.783:17): user pid=2933 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185878231.784:18): user pid=2933 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185878231.816:19): user pid=2933 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185878659.476:20): user pid=2933 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185878665.794:21): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185878665.828:22): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185878726.597:23): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185878726.600:24): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185878726.602:25): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185878726.647:26): login pid=2627 uid=0 old auid=0 new auid=500
>type=USER_START msg=audit(1185878726.725:27): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185878726.727:28): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185879936.380:29): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185879936.389:30): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185880192.314:31): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185880192.316:32): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185880201.724:33): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185880201.726:34): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185880214.203:35): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185880214.204:36): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185880224.249:37): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185880224.251:38): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185880224.253:39): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185880224.272:40): login pid=2627 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1185880224.274:41): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185880224.276:42): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185880242.836:43): user pid=4982 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185880242.837:44): user pid=4982 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185880242.870:45): user pid=4982 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185880280.814:46): user pid=4982 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185880286.314:47): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185880286.317:48): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185880297.900:49): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185880297.902:50): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185880297.904:51): user pid=2627 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185880297.912:52): login pid=2627 uid=0 old auid=0 new auid=504
>type=USER_START msg=audit(1185880297.940:53): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185880297.942:54): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185880851.229:55): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185880851.229:56): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185880866.423:57): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185880866.426:58): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185880866.428:59): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185880866.436:60): login pid=2627 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1185880866.459:61): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185880866.461:62): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185881081.701:63): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185881081.703:64): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185881098.478:65): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185881098.480:66): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185881098.481:67): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185881098.486:68): login pid=2627 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185881098.511:69): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185881098.512:70): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185882762.981:71): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185882762.982:72): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185883746.521:73): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185883746.523:74): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185883754.781:75): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185883754.784:76): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185883754.785:77): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185883754.791:78): login pid=2627 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1185883754.813:79): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185883754.814:80): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185886324.164:81): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185886324.167:82): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185886341.745:83): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185886341.747:84): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185886341.750:85): user pid=2627 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185886341.756:86): login pid=2627 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1185886341.781:87): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185886341.783:88): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185886424.762:89): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185886424.764:90): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185889709.737:91): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185889709.739:92): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185889709.742:93): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185889709.747:94): login pid=2627 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185889709.771:95): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185889709.773:96): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185889928.440:97): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185889928.440:98): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185891652.233:99): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185891652.235:100): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185891652.238:101): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185891652.243:102): login pid=2627 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185891652.269:103): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185891652.271:104): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185893440.366:105): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185893440.368:106): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185893450.649:107): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185893450.651:108): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185893450.654:109): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185893450.660:110): login pid=2627 uid=0 old auid=500 new auid=504
>type=USER_START msg=audit(1185893450.699:111): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185893450.702:112): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185893563.809:113): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185893563.811:114): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185893680.790:115): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185893680.793:116): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185893680.795:117): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185893680.801:118): login pid=2627 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1185893680.824:119): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185893680.826:120): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185893718.237:121): user pid=8415 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185893731.912:122): user pid=8450 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1185893801.422:123): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185893801.424:124): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185898020.844:125): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185898020.847:126): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185898020.849:127): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185898020.855:128): login pid=2627 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1185898020.878:129): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185898020.880:130): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185900079.811:131): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185900079.812:132): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185900093.575:133): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185900093.578:134): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185900093.580:135): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185900093.586:136): login pid=2627 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1185900093.609:137): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185900093.611:138): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185902482.140:139): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185902482.142:140): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185903294.123:141): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185903294.125:142): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185903294.128:143): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185903294.134:144): login pid=2627 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185903294.159:145): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185903294.161:146): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185903311.306:147): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185903311.308:148): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185903327.764:149): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185903327.766:150): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185903327.768:151): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185903327.773:152): login pid=2627 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1185903327.798:153): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185903327.798:154): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185904367.437:155): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185904367.437:156): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185906304.668:157): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185906304.670:158): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185906304.672:159): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185906304.679:160): login pid=2627 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1185906304.702:161): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185906304.704:162): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185922339.543:163): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185922339.544:164): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185922357.042:165): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1185922357.044:166): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1185922363.284:167): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185922363.287:168): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185922363.289:169): user pid=2627 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185922363.296:170): login pid=2627 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1185922363.320:171): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185922363.322:172): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185923755.921:173): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185923755.923:174): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185925033.642:175): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185925033.644:176): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185925033.647:177): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185925033.653:178): login pid=2627 uid=0 old auid=500 new auid=504
>type=USER_START msg=audit(1185925033.676:179): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185925033.678:180): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185929139.533:181): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185929139.535:182): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185929153.983:183): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185929153.986:184): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185929153.988:185): user pid=2627 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185929153.994:186): login pid=2627 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1185929154.017:187): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185929154.020:188): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185930350.709:189): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185930350.710:190): user pid=2627 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1185930373.924:4082) auditd normal halt, sending auid=4294967295 pid=13595 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1936
>type=DAEMON_START msg=audit(1185965773.405:5103) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1951 res=success, auditd pid=1951
>type=CONFIG_CHANGE msg=audit(1185965773.505:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1185965773.555:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1185965789.680:6): user pid=2228 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185965811.232:7): user pid=2323 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185965811.235:8): user pid=2323 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185965811.237:9): user pid=2323 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185965811.240:10): login pid=2323 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1185965811.263:11): user pid=2323 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185965811.265:12): user pid=2323 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185967286.677:13): user pid=2767 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1185967286.679:14): user pid=2767 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1185967286.790:15): user pid=2767 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185967343.951:16): user pid=2767 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1185967354.164:17): user pid=2323 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185967354.166:18): user pid=2323 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1185967362.268:5104) auditd normal halt, sending auid=4294967295 pid=3449 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1951
>type=DAEMON_START msg=audit(1185972063.590:8592) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1185972063.690:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1185972063.714:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1185972080.438:6): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1185972097.216:7): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185972097.218:8): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185972097.220:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185972097.224:10): login pid=2304 uid=0 old auid=4294967295 new auid=503
>type=USER_START msg=audit(1185972097.247:11): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185972097.249:12): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185977267.103:13): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185977267.105:14): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185977278.404:15): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185977278.406:16): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185977278.409:17): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185977278.426:18): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1185977278.449:19): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185977278.451:20): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185977340.416:21): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185977340.418:22): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185981678.797:23): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185981678.800:24): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185981678.802:25): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185981678.807:26): login pid=2304 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1185981678.832:27): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185981678.834:28): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185994014.424:29): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185994014.426:30): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185994077.680:31): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185994077.682:32): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185994077.685:33): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185994077.691:34): login pid=2304 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1185994077.715:35): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185994077.717:36): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185997124.584:37): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185997124.586:38): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1185997136.818:39): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1185997136.820:40): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1185997136.822:41): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1185997136.827:42): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1185997136.849:43): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1185997136.850:44): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1185997361.942:45): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1185997361.944:46): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186006609.634:47): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186006609.637:48): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186006609.639:49): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186006609.645:50): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186006609.669:51): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186006609.671:52): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186006636.545:53): user pid=6220 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1186008059.083:54): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186008059.084:55): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186009421.539:56): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186009421.542:57): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186009421.544:58): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186009421.552:59): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186009421.576:60): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186009421.578:61): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186010712.221:62): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186010712.223:63): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186015297.050:64): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186015297.053:65): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186015297.055:66): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186015297.061:67): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186015297.085:68): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186015297.087:69): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186022923.969:70): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186022923.970:71): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186022931.532:8593) auditd normal halt, sending auid=4294967295 pid=8401 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186069667.546:6795) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186069667.646:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186069667.697:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186069684.536:6): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186069743.902:7): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186069743.904:8): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186069743.906:9): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186069743.909:10): login pid=2305 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186069743.934:11): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186069743.936:12): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186073637.099:13): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186073637.100:14): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186073654.162:15): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186073654.164:16): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186073662.459:17): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186073662.462:18): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186073662.464:19): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186073662.481:20): login pid=2305 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186073662.503:21): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186073662.505:22): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186073691.425:23): user pid=3435 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1186073691.426:24): user pid=3435 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1186073691.512:25): user pid=3435 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186073746.229:26): user pid=3435 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186076457.528:27): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186076457.529:28): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186079431.273:29): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186079431.276:30): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186079431.278:31): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186079431.284:32): login pid=2305 uid=0 old auid=503 new auid=501
>type=USER_START msg=audit(1186079431.308:33): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186079431.310:34): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186091456.981:35): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186091456.983:36): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186091471.628:37): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186091471.630:38): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186091471.633:39): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186091471.640:40): login pid=2305 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1186091471.664:41): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186091471.666:42): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186091685.676:43): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186091685.677:44): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186094325.999:45): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186094326.002:46): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186094326.004:47): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186094326.011:48): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186094326.035:49): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186094326.037:50): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186097278.803:51): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186097278.805:52): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186101745.458:53): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186101745.461:54): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186101745.462:55): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186101745.467:56): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186101745.491:57): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186101745.493:58): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186103212.124:59): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186103212.126:60): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186103219.674:6796) auditd normal halt, sending auid=4294967295 pid=6819 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186143090.971:1555) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1944 res=success, auditd pid=1944
>type=CONFIG_CHANGE msg=audit(1186143091.070:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186143091.119:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186143108.267:6): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186143123.306:7): user pid=2316 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186143123.309:8): user pid=2316 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186143123.311:9): user pid=2316 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186143123.315:10): login pid=2316 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186143123.338:11): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186143123.341:12): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186144942.437:13): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186144942.439:14): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186144958.951:15): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186144958.952:16): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186144966.679:17): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186144966.681:18): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186144966.684:19): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186144966.706:20): login pid=2316 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186144966.729:21): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186144966.731:22): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186146714.376:23): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186146714.377:24): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186154098.382:25): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186154098.384:26): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186154098.387:27): user pid=2316 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186154098.394:28): login pid=2316 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186154098.417:29): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186154098.419:30): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186154855.567:31): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186154855.568:32): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186154902.528:33): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186154902.530:34): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186154902.533:35): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186154902.539:36): login pid=2316 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186154902.562:37): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186154902.564:38): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186157408.692:39): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186157408.694:40): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186157447.000:41): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186157447.002:42): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186157447.005:43): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186157447.011:44): login pid=2316 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1186157447.036:45): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186157447.038:46): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186164331.342:47): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186164331.345:48): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186164345.640:49): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186164345.643:50): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186164345.645:51): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186164345.652:52): login pid=2316 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1186164345.676:53): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186164345.678:54): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186164899.944:55): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186164899.946:56): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186166507.374:57): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186166507.377:58): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186166507.379:59): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186166507.384:60): login pid=2316 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186166507.407:61): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186166507.409:62): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186166967.903:63): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186166967.904:64): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186167525.566:65): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186167525.567:66): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186167537.854:67): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186167537.856:68): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186167537.858:69): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186167537.863:70): login pid=2316 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1186167537.885:71): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186167537.886:72): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186177693.695:73): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186177693.697:74): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186177737.606:75): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186177737.609:76): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186177737.611:77): user pid=2316 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186177737.617:78): login pid=2316 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1186177737.640:79): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186177737.642:80): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186178867.096:81): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186178867.098:82): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186179015.254:83): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186179015.257:84): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186179015.259:85): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186179015.265:86): login pid=2316 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186179015.288:87): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186179015.290:88): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186181175.822:89): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186181175.824:90): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186183788.405:91): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186183788.408:92): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186183788.410:93): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186183788.416:94): login pid=2316 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186183788.441:95): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186183788.443:96): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186185310.150:97): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186185310.152:98): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186188154.186:99): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186188154.189:100): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186188154.191:101): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186188154.197:102): login pid=2316 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186188154.222:103): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186188154.224:104): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186195065.320:105): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186195065.322:106): user pid=2316 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186195072.978:1556) auditd normal halt, sending auid=4294967295 pid=10004 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1944
>type=DAEMON_START msg=audit(1186232051.269:1190) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1186232051.368:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186232051.418:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186232067.677:6): user pid=2226 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186232080.563:7): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186232080.565:8): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186232080.566:9): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186232080.569:10): login pid=2302 uid=0 old auid=4294967295 new auid=503
>type=USER_START msg=audit(1186232080.592:11): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186232080.593:12): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186235537.619:13): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186235537.621:14): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186235548.408:15): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186235548.410:16): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186235548.413:17): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186235548.435:18): login pid=2302 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186235548.458:19): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186235548.460:20): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186236264.212:21): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186236264.214:22): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186242921.855:23): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186242921.858:24): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186242921.860:25): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186242921.867:26): login pid=2302 uid=0 old auid=500 new auid=504
>type=USER_START msg=audit(1186242921.890:27): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186242921.892:28): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186244660.928:29): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186244660.929:30): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186244671.994:31): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186244671.996:32): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186244671.999:33): user pid=2302 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186244672.005:34): login pid=2302 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1186244672.028:35): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186244672.030:36): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186244757.223:37): user pid=4321 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1186244757.223:38): user pid=4321 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1186244757.313:39): user pid=4321 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186244798.888:40): user pid=4321 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186252435.024:41): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186252435.026:42): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186252452.119:1191) auditd normal halt, sending auid=4294967295 pid=5359 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1186235363.184:4935) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1186235363.283:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186235363.307:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186235379.147:6): user pid=2215 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186235686.789:7): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186235686.791:8): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186235686.794:9): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186235686.797:10): login pid=2302 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186235686.819:11): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186235686.822:12): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186238100.038:13): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186238100.040:14): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186238114.976:15): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186238114.978:16): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186238114.981:17): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186238115.005:18): login pid=2302 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186238115.029:19): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186238115.031:20): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186238148.043:21): user pid=3054 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1186238148.044:22): user pid=3054 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1186238148.144:23): user pid=3054 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1186256152.001:24): user pid=3092 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186256152.398:25): user pid=3054 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186256165.585:26): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186256165.587:27): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186256176.645:28): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186256176.648:29): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186256176.650:30): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186256176.655:31): login pid=2302 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186256176.678:32): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186256176.680:33): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186258529.130:34): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186258529.132:35): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186258538.777:36): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186258538.779:37): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186258538.782:38): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186258538.789:39): login pid=2302 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186258538.812:40): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186258538.814:41): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186259312.210:42): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186259312.212:43): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186265481.131:44): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186265481.134:45): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186265481.136:46): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186265481.142:47): login pid=2302 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186265481.166:48): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186265481.168:49): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186266483.546:50): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186266483.548:51): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186273482.648:4936) auditd normal halt, sending auid=4294967295 pid=5695 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1186274547.164:9445) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1946 res=success, auditd pid=1946
>type=CONFIG_CHANGE msg=audit(1186274547.263:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186274547.312:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186274563.336:6): user pid=2242 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186274574.780:7): user pid=2318 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186274574.782:8): user pid=2318 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186274574.785:9): user pid=2318 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186274574.788:10): login pid=2318 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186274574.810:11): user pid=2318 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186274574.813:12): user pid=2318 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186276509.500:13): user pid=2318 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186276509.503:14): user pid=2318 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186276516.755:9446) auditd normal halt, sending auid=4294967295 pid=3375 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1946
>type=DAEMON_START msg=audit(1186315386.709:2595) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1186315386.808:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186315386.841:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186315403.773:6): user pid=2226 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186315414.086:7): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186315414.089:8): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186315414.091:9): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186315414.095:10): login pid=2303 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186315414.118:11): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186315414.121:12): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186319101.849:13): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186319101.851:14): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186319115.012:15): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186319115.015:16): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186319115.017:17): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186319115.043:18): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186319115.067:19): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186319115.069:20): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186319403.154:21): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186319403.156:22): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186319418.021:2596) auditd normal halt, sending auid=4294967295 pid=3513 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186320042.069:2037) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1186320042.169:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186320042.218:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186320058.215:6): user pid=2217 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186320153.642:7): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186320153.644:8): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186320153.646:9): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186320153.650:10): login pid=2302 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186320153.672:11): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186320153.674:12): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186320470.555:13): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186320470.557:14): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186320485.078:2038) auditd normal halt, sending auid=4294967295 pid=2926 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1186321602.182:5926) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1186321602.282:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186321602.331:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186321618.479:6): user pid=2256 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186321630.345:7): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186321630.347:8): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186321630.349:9): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186321630.354:10): login pid=2315 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186321630.377:11): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186321630.380:12): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186321806.227:13): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186321806.228:14): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186323062.406:5927) auditd normal halt, sending auid=4294967295 pid=3007 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1186323888.170:7166) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186323888.270:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186323888.294:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186323904.949:6): user pid=2227 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186323922.284:7): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186323922.286:8): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186323922.289:9): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186323922.292:10): login pid=2305 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186323922.315:11): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186323922.318:12): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186324280.454:13): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186324280.456:14): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186325820.583:15): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186325820.586:16): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186325820.588:17): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186325820.621:18): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186325820.659:19): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186325820.661:20): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186327167.561:21): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186327167.562:22): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186329560.432:23): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186329560.435:24): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186329560.437:25): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186329560.445:26): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186329560.468:27): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186329560.470:28): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186329635.711:29): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186329635.713:30): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186332639.679:31): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186332639.681:32): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186332639.683:33): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186332639.690:34): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186332639.713:35): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186332639.715:36): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186332846.293:37): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186332846.295:38): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186339071.259:39): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186339071.261:40): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186339071.264:41): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186339071.269:42): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186339071.292:43): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186339071.295:44): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186341055.711:45): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186341055.712:46): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186341264.448:7167) auditd normal halt, sending auid=4294967295 pid=5213 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186341347.190:1653) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1932 res=success, auditd pid=1932
>type=CONFIG_CHANGE msg=audit(1186341347.289:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186341347.322:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186341363.669:6): user pid=2219 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_END msg=audit(1186341380.129:1654) auditd normal halt, sending auid=4294967295 pid=2625 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1932
>type=DAEMON_START msg=audit(1186341842.175:9223) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1932 res=success, auditd pid=1932
>type=CONFIG_CHANGE msg=audit(1186341842.274:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186341842.324:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186341858.578:6): user pid=2220 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186342312.466:7): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186342312.469:8): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186342312.471:9): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186342312.475:10): login pid=2313 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186342312.497:11): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186342312.500:12): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186343269.064:13): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186343269.066:14): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186349808.905:15): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186349808.907:16): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186349808.910:17): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186349808.937:18): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186349808.960:19): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186349808.962:20): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186350417.889:21): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186350417.892:22): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186351733.718:23): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186351733.720:24): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186351733.723:25): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186351733.728:26): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186351733.751:27): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186351733.753:28): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186352413.496:29): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186352413.497:30): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186352808.528:31): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186352808.530:32): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186352808.532:33): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186352808.538:34): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186352808.561:35): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186352808.563:36): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186354608.541:37): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186354608.543:38): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186354625.318:9224) auditd normal halt, sending auid=4294967295 pid=4512 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1932
>type=DAEMON_START msg=audit(1186354943.155:7004) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1932 res=success, auditd pid=1932
>type=CONFIG_CHANGE msg=audit(1186354943.254:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186354943.303:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186354959.484:6): user pid=2245 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186354970.425:7): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186354970.428:8): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186354970.430:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186354970.434:10): login pid=2304 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186354970.458:11): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186354970.460:12): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186355512.312:13): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186355512.314:14): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186356591.746:15): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186356591.749:16): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186356591.751:17): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186356591.785:18): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186356591.809:19): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186356591.811:20): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186356662.563:21): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186356662.565:22): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186356677.253:23): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186356677.256:24): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186356677.258:25): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186356677.265:26): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186356677.289:27): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186356677.291:28): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186359032.665:29): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186359032.666:30): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186359042.761:31): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186359042.764:32): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186359042.766:33): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186359042.773:34): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186359042.796:35): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186359042.798:36): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186359100.888:37): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186359100.890:38): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186359108.178:7005) auditd normal halt, sending auid=4294967295 pid=4109 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1932
>type=DAEMON_START msg=audit(1186368357.292:9123) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1887 res=success, auditd pid=1887
>type=CONFIG_CHANGE msg=audit(1186368357.391:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186368357.432:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186368373.473:6): user pid=2213 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186368413.693:7): user pid=2259 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186368413.696:8): user pid=2259 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186368413.698:9): user pid=2259 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186368413.702:10): login pid=2259 uid=0 old auid=4294967295 new auid=504
>type=USER_START msg=audit(1186368413.724:11): user pid=2259 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186368413.726:12): user pid=2259 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186371497.806:13): user pid=2259 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186371497.808:14): user pid=2259 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186371504.559:9124) auditd normal halt, sending auid=4294967295 pid=2874 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1887
>type=DAEMON_START msg=audit(1186403082.794:6854) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186403082.893:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186403082.924:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186403099.949:6): user pid=2223 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186403115.616:7): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186403115.619:8): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186403115.621:9): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186403115.625:10): login pid=2305 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186403115.647:11): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186403115.649:12): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186404777.845:13): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186404777.846:14): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186404792.073:15): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186404792.075:16): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186404800.365:17): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186404800.368:18): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186404800.369:19): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186404800.399:20): login pid=2305 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186404800.420:21): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186404800.421:22): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186404931.350:23): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186404931.351:24): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186405800.713:25): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186405800.716:26): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186405800.718:27): user pid=2305 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186405800.725:28): login pid=2305 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186405800.748:29): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186405800.750:30): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186407147.015:31): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186407147.017:32): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186415855.005:33): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186415855.007:34): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186415855.009:35): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186415855.014:36): login pid=2305 uid=0 old auid=500 new auid=504
>type=USER_START msg=audit(1186415855.036:37): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186415855.038:38): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186430095.916:39): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186430095.916:40): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186430109.827:41): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186430109.830:42): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186430109.833:43): user pid=2305 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186430109.838:44): login pid=2305 uid=0 old auid=504 new auid=501
>type=USER_START msg=audit(1186430109.862:45): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186430109.864:46): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186439149.494:47): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186439149.496:48): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186439164.261:49): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186439164.263:50): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186439164.266:51): user pid=2305 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186439164.272:52): login pid=2305 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1186439164.295:53): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186439164.297:54): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186439318.150:55): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186439318.151:56): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186444094.733:57): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186444094.736:58): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186444094.738:59): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186444094.745:60): login pid=2305 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186444094.768:61): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186444094.770:62): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186444249.884:63): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186444249.886:64): user pid=2305 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186444434.043:6855) auditd normal halt, sending auid=4294967295 pid=7127 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186519608.433:5745) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1932 res=success, auditd pid=1932
>type=CONFIG_CHANGE msg=audit(1186519608.532:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186519608.557:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186519624.131:6): user pid=2245 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186519639.771:7): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186519639.773:8): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186519639.776:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186519639.779:10): login pid=2304 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186519639.803:11): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186519639.806:12): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186523272.918:13): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186523272.920:14): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186523290.982:15): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186523290.985:16): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186523290.987:17): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186523291.013:18): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186523291.042:19): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186523291.044:20): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186524939.723:21): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186524939.725:22): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186524951.219:23): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186524951.222:24): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186524951.224:25): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186524951.230:26): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186524951.254:27): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186524951.256:28): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186525642.053:29): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186525642.054:30): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186528336.477:31): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186528336.480:32): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186528336.482:33): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186528336.488:34): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186528336.513:35): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186528336.515:36): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186529716.982:37): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186529716.984:38): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186529729.898:39): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186529729.900:40): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186529729.903:41): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186529729.909:42): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186529729.933:43): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186529729.935:44): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186530865.919:45): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186530865.921:46): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186530879.498:47): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186530879.501:48): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186530879.503:49): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186530879.510:50): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186530879.533:51): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186530879.536:52): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186530939.646:53): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186530939.648:54): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186530946.974:5746) auditd normal halt, sending auid=4294967295 pid=5362 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1932
>type=DAEMON_START msg=audit(1186573880.107:6644) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1186573880.206:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186573880.255:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186573896.320:6): user pid=2214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186573908.360:7): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186573908.363:8): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186573908.364:9): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186573908.366:10): login pid=2303 uid=0 old auid=4294967295 new auid=503
>type=USER_START msg=audit(1186573908.392:11): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186573908.393:12): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186574343.829:13): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186574343.831:14): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186574353.974:15): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186574353.976:16): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186574353.978:17): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186574354.003:18): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186574354.027:19): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186574354.029:20): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186576124.488:21): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186576124.491:22): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186576140.441:6645) auditd normal halt, sending auid=4294967295 pid=3501 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186576506.186:218) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186576506.286:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186576506.335:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186576522.600:6): user pid=2222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186576533.573:7): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186576533.575:8): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186576533.578:9): user pid=2313 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186576533.582:10): login pid=2313 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186576533.605:11): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186576533.608:12): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186577560.338:13): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186577560.340:14): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186577575.806:15): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186577575.809:16): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186577575.811:17): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186577575.831:18): login pid=2313 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186577575.854:19): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186577575.856:20): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186580625.221:21): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186580625.223:22): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186580636.046:23): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186580636.049:24): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186580636.051:25): user pid=2313 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186580636.058:26): login pid=2313 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186580636.082:27): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186580636.084:28): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186581847.449:29): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186581847.451:30): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186582827.128:31): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186582827.130:32): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186582827.133:33): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186582827.139:34): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186582827.162:35): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186582827.164:36): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186584252.924:37): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186584252.926:38): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186584848.761:39): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186584848.764:40): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186584848.766:41): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186584848.772:42): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186584848.796:43): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186584848.798:44): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186585975.853:45): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186585975.855:46): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186588514.716:47): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186588514.719:48): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186588514.721:49): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186588514.727:50): login pid=2313 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186588514.751:51): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186588514.753:52): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186588581.367:53): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186588581.369:54): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186591232.024:55): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186591232.027:56): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186591232.029:57): user pid=2313 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186591232.034:58): login pid=2313 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1186591232.058:59): user pid=2313 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186591232.060:60): user pid=2313 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186591412.378:61): user pid=2313 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186591412.380:62): user pid=2313 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186591429.249:219) auditd normal halt, sending auid=4294967295 pid=5741 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186599312.274:8781) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1186599312.374:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186599312.407:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186599328.562:6): user pid=2217 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186599338.565:7): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186599338.567:8): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186599338.570:9): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186599338.573:10): login pid=2303 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186599338.595:11): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186599338.598:12): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186599658.730:13): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186599658.733:14): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186614640.600:15): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186614640.603:16): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186614640.604:17): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186614640.624:18): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186614640.647:19): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186614640.648:20): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186617583.603:21): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186617583.605:22): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186617749.998:8782) auditd normal halt, sending auid=4294967295 pid=4273 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186657895.098:1078) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1186657895.197:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186657895.222:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186657912.295:6): user pid=2219 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186657933.921:7): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186657933.924:8): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186657933.926:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186657933.930:10): login pid=2304 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186657933.952:11): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186657933.955:12): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186661231.269:13): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186661231.271:14): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186661247.483:15): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186661247.486:16): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186661247.487:17): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186661247.509:18): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186661247.532:19): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186661247.533:20): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186662803.743:21): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186662803.745:22): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186663230.274:23): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186663230.276:24): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186663230.278:25): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186663230.284:26): login pid=2304 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186663230.308:27): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186663230.310:28): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186666136.907:29): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186666136.908:30): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186672768.478:31): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186672768.481:32): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186672768.483:33): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186672768.488:34): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186672768.513:35): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186672768.515:36): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186673682.983:37): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186673682.985:38): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186677197.000:39): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186677197.003:40): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186677197.004:41): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186677197.009:42): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186677197.034:43): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186677197.035:44): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186677268.577:45): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186677268.579:46): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186679187.293:47): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186679187.296:48): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186679187.298:49): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186679187.305:50): login pid=2304 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186679187.329:51): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186679187.331:52): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186681132.921:53): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186681132.922:54): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186686409.872:55): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186686409.874:56): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186686409.877:57): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186686409.883:58): login pid=2304 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1186686409.905:59): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186686409.907:60): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186687529.378:61): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186687529.379:62): user pid=2304 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186687544.226:1079) auditd normal halt, sending auid=4294967295 pid=6556 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186687645.655:2015) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1889 res=success, auditd pid=1889
>type=CONFIG_CHANGE msg=audit(1186687645.754:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186687645.787:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186687661.727:6): user pid=2177 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186687688.794:7): user pid=2261 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186687688.796:8): user pid=2261 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186687688.799:9): user pid=2261 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186687688.803:10): login pid=2261 uid=0 old auid=4294967295 new auid=501
>type=USER_START msg=audit(1186687688.826:11): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186687688.828:12): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186699832.720:13): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186699832.722:14): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186700199.207:15): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186700199.209:16): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186700199.211:17): user pid=2261 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186700199.217:18): login pid=2261 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1186700199.240:19): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186700199.242:20): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186700264.588:21): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1186700264.589:22): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1186700264.713:23): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1186700264.716:24): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1186700285.874:25): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1186700285.877:26): user pid=3198 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1186706698.513:27): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186706698.515:28): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186707371.018:29): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186707371.021:30): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186707371.023:31): user pid=2261 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186707371.028:32): login pid=2261 uid=0 old auid=500 new auid=504
>type=USER_START msg=audit(1186707371.063:33): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186707371.065:34): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186707376.239:35): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186707376.241:36): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186707390.256:37): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186707390.258:38): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186707390.261:39): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186707390.266:40): login pid=2261 uid=0 old auid=504 new auid=504
>type=USER_START msg=audit(1186707390.291:41): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186707390.293:42): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186709700.228:43): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186709700.231:44): user pid=2261 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186709707.228:2016) auditd normal halt, sending auid=4294967295 pid=5029 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1889
>type=DAEMON_START msg=audit(1186742763.109:5928) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186742763.208:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186742763.241:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186742779.474:6): user pid=2226 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_END msg=audit(1186742795.425:5929) auditd normal halt, sending auid=4294967295 pid=2626 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186744516.155:3079) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1186744516.254:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186744516.304:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186744532.178:6): user pid=2215 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186744548.282:7): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186744548.285:8): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186744548.287:9): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186744548.291:10): login pid=2302 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186744548.313:11): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186744548.316:12): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186745513.285:13): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186745513.287:14): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186745521.330:3080) auditd normal halt, sending auid=4294967295 pid=3411 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1186750603.698:7347) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1186750603.799:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186750603.848:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186750620.322:6): user pid=2242 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186750635.768:7): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186750635.770:8): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186750635.772:9): user pid=2315 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186750635.776:10): login pid=2315 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186750635.800:11): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186750635.804:12): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186751424.892:13): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186751424.894:14): user pid=2315 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186751433.195:7348) auditd normal halt, sending auid=4294967295 pid=3402 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1186784665.996:91) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1186784666.096:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186784666.119:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186784682.227:6): user pid=2219 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186784700.695:7): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186784700.697:8): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186784700.700:9): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186784700.703:10): login pid=2303 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186784700.726:11): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186784700.728:12): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186785696.963:13): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186785696.966:14): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186787402.814:15): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186787402.816:16): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186787402.819:17): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186787402.842:18): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186787402.871:19): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186787402.873:20): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186788768.797:21): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186788768.797:22): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186788802.686:23): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186788802.687:24): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186788812.136:25): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186788812.138:26): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186788821.643:27): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186788821.646:28): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186788821.648:29): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186788821.654:30): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186788821.677:31): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186788821.679:32): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186788920.186:33): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186788920.187:34): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186789219.639:35): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186789219.641:36): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186789219.644:37): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186789219.649:38): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186789219.671:39): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186789219.673:40): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186789322.860:41): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186789322.862:42): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186793326.618:43): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186793326.621:44): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186793326.623:45): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186793326.630:46): login pid=2303 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1186793326.652:47): user pid=2303 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186793326.654:48): user pid=2303 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186800178.088:49): user pid=2303 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186800178.090:50): user pid=2303 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186800197.052:92) auditd normal halt, sending auid=4294967295 pid=5193 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1186830123.881:2758) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1934 res=success, auditd pid=1934
>type=CONFIG_CHANGE msg=audit(1186830123.982:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186830124.006:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186830140.662:6): user pid=2220 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186830156.945:7): user pid=2306 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186830156.948:8): user pid=2306 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186830156.950:9): user pid=2306 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186830156.954:10): login pid=2306 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186830156.976:11): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186830156.979:12): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186832281.401:13): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186832281.403:14): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186832294.348:15): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186832294.350:16): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186832294.353:17): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186832294.380:18): login pid=2306 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1186832294.382:19): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186832294.384:20): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186832822.644:21): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186832822.646:22): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186832840.795:23): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186832840.798:24): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186832840.800:25): user pid=2306 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186832840.823:26): login pid=2306 uid=0 old auid=0 new auid=500
>type=USER_START msg=audit(1186832840.875:27): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186832840.877:28): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186833195.093:29): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186833195.102:30): user pid=2306 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186833202.996:2759) auditd normal halt, sending auid=4294967295 pid=4173 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1934
>type=DAEMON_START msg=audit(1186837475.975:1759) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1933 res=success, auditd pid=1933
>type=CONFIG_CHANGE msg=audit(1186837476.075:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186837476.124:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186837492.215:6): user pid=2222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186837505.235:7): user pid=2297 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186837505.237:8): user pid=2297 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186837511.740:9): user pid=2297 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186837511.743:10): user pid=2297 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186837511.745:11): user pid=2297 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186837511.749:12): login pid=2297 uid=0 old auid=4294967295 new auid=503
>type=USER_START msg=audit(1186837511.772:13): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186837511.774:14): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186837816.748:15): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186837816.750:16): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186839212.262:17): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186839212.265:18): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186839212.266:19): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186839212.287:20): login pid=2297 uid=0 old auid=503 new auid=503
>type=USER_START msg=audit(1186839212.310:21): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186839212.310:22): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186839464.782:23): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186839464.784:24): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186840308.438:25): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186840308.441:26): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186840308.443:27): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186840308.450:28): login pid=2297 uid=0 old auid=503 new auid=503
>type=USER_START msg=audit(1186840308.475:29): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186840308.477:30): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186841508.873:31): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186841508.875:32): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186845843.208:33): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186845843.210:34): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186845843.212:35): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186845843.219:36): login pid=2297 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186845843.243:37): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186845843.245:38): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186846950.901:39): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186846950.902:40): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186846963.677:41): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186846963.679:42): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186846963.682:43): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186846963.688:44): login pid=2297 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186846963.712:45): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186846963.714:46): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186850620.109:47): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186850620.112:48): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186850630.795:49): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186850630.797:50): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186850630.799:51): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186850630.806:52): login pid=2297 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186850630.829:53): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186850630.832:54): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186850691.076:55): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186850691.078:56): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186851223.174:57): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186851223.177:58): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186851223.179:59): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186851223.184:60): login pid=2297 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186851223.206:61): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186851223.208:62): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186851782.427:63): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186851782.428:64): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186852121.513:65): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186852121.515:66): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186852121.517:67): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186852121.523:68): login pid=2297 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1186852121.547:69): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186852121.549:70): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186855159.880:71): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186855159.883:72): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186855435.574:73): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186855435.577:74): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186855435.579:75): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186855435.585:76): login pid=2297 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186855435.608:77): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186855435.610:78): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186855764.786:79): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186855764.788:80): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186864427.235:81): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186864427.237:82): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186864427.240:83): user pid=2297 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186864427.245:84): login pid=2297 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1186864427.268:85): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186864427.270:86): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186864667.985:87): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186864667.987:88): user pid=2297 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186875499.573:1760) auditd normal halt, sending auid=4294967295 pid=7969 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1933
>type=DAEMON_START msg=audit(1186905043.594:3089) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1186905043.693:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186905043.726:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186905059.750:6): user pid=2213 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186905083.197:7): user pid=2294 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186905083.199:8): user pid=2294 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186905083.202:9): user pid=2294 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186905083.205:10): login pid=2294 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1186905083.227:11): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186905083.230:12): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186905214.882:13): user pid=2649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1186905214.883:14): user pid=2649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1186905214.968:15): user pid=2649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1186923097.001:16): user pid=2687 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186923097.548:17): user pid=2649 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1186925453.108:18): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186925453.109:19): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186925824.358:20): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186925824.361:21): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186925824.363:22): user pid=2294 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186925824.395:23): login pid=2294 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186925824.418:24): user pid=2294 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186925824.420:25): user pid=2294 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186925920.822:26): user pid=2294 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186925920.824:27): user pid=2294 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186929070.794:3090) auditd normal halt, sending auid=4294967295 pid=3790 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1186936834.380:2292) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1932 res=success, auditd pid=1932
>type=CONFIG_CHANGE msg=audit(1186936834.479:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1186936834.529:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1186936851.070:6): user pid=2248 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1186936884.930:7): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186936884.932:8): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186936884.934:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186936884.937:10): login pid=2304 uid=0 old auid=4294967295 new auid=504
>type=USER_START msg=audit(1186936884.958:11): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186936884.960:12): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186942312.028:13): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186942312.030:14): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186942325.205:15): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186942325.207:16): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186942325.210:17): user pid=2304 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186942325.240:18): login pid=2304 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1186942325.264:19): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186942325.266:20): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186943257.618:21): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186943257.620:22): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1186943281.931:23): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1186943281.933:24): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1186943297.105:25): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1186943297.107:26): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1186943297.110:27): user pid=2304 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1186943297.117:28): login pid=2304 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1186943297.141:29): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1186943297.143:30): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1186949603.827:31): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1186949603.829:32): user pid=2304 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1186954369.498:2293) auditd normal halt, sending auid=4294967295 pid=4389 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1932
>type=DAEMON_START msg=audit(1187003662.144:4413) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930
>type=CONFIG_CHANGE msg=audit(1187003662.243:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187003662.292:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187003678.209:6): user pid=2243 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187003702.092:7): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187003702.095:8): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187003702.097:9): user pid=2302 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187003702.101:10): login pid=2302 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187003702.123:11): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187003702.126:12): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187007248.957:13): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187007248.960:14): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187007270.056:15): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187007270.059:16): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187007270.060:17): user pid=2302 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187007270.079:18): login pid=2302 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187007270.102:19): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187007270.103:20): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187007589.707:21): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187007589.709:22): user pid=2302 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187007596.878:4414) auditd normal halt, sending auid=4294967295 pid=3688 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1930
>type=DAEMON_START msg=audit(1187015589.288:7729) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1931 res=success, auditd pid=1931
>type=CONFIG_CHANGE msg=audit(1187015589.387:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187015589.420:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187015605.212:6): user pid=2219 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187015664.438:7): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187015664.441:8): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187015664.442:9): user pid=2303 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187015664.444:10): login pid=2303 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187015664.469:11): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187015664.470:12): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187016065.057:13): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187016065.059:14): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187016615.107:15): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187016615.110:16): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187016615.112:17): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187016615.134:18): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187016615.156:19): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187016615.158:20): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187017421.359:21): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187017421.361:22): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187017431.290:23): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187017431.293:24): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187017431.295:25): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187017431.302:26): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187017431.326:27): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187017431.328:28): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187018695.166:29): user pid=3465 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1187021816.530:30): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187021816.533:31): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187021829.022:32): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187021829.025:33): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187021829.026:34): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187021829.031:35): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187021829.053:36): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187021829.054:37): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187022453.153:38): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187022453.155:39): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187022524.566:40): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187022524.569:41): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187022524.571:42): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187022524.577:43): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187022524.602:44): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187022524.604:45): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187023331.571:46): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187023331.572:47): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187023947.956:48): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187023947.958:49): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187023947.960:50): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187023947.967:51): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187023947.991:52): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187023947.993:53): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187024448.647:54): user pid=4886 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187024448.649:55): user pid=4886 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187024448.752:56): user pid=4886 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187024528.638:57): user pid=4886 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187025499.429:58): user pid=5033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187025499.431:59): user pid=5033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187025499.445:60): user pid=5033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187025567.516:61): user pid=5033 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187025669.259:62): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187025669.261:63): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187025819.140:64): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187025819.144:65): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187025819.145:66): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187025819.151:67): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187025819.175:68): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187025819.176:69): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187027980.339:70): user pid=5640 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187027980.341:71): user pid=5640 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187027980.413:72): user pid=5640 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187027991.925:73): user pid=5640 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187028862.060:74): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187028862.062:75): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187030526.014:76): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187030526.017:77): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187030526.019:78): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187030526.035:79): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187030526.064:80): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187030526.066:81): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187030617.446:82): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187030617.447:83): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187030617.469:84): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187030617.471:85): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187030636.637:86): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187030636.639:87): user pid=6265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187030655.027:88): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187030655.029:89): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187030762.019:90): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187030762.021:91): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187030762.024:92): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187030762.030:93): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187030762.055:94): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187030762.057:95): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187031263.377:96): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187031263.378:97): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187031263.397:98): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187031263.399:99): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1187033055.276:100): avc:  denied  { read write } for  pid=7284 comm="ifconfig" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:ifconfig_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187033055.276:100): arch=40000003 syscall=11 success=yes exit=0 a0=8a665b0 a1=8a668f0 a2=8a66770 a3=8a66418 items=0 ppid=7283 pid=7284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ifconfig" exe="/sbin/ifconfig" subj=user_u:system_r:ifconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187033055.276:100):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187033168.014:101): avc:  denied  { read write } for  pid=7295 comm="e2label" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:fsadm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187033168.014:101): arch=40000003 syscall=11 success=yes exit=0 a0=8f499d9 a1=9042340 a2=8c6f2c8 a3=8c44725 items=0 ppid=7294 pid=7295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="e2label" exe="/sbin/e2label" subj=user_u:system_r:fsadm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187033168.014:101):  path="/var/webmin/sessiondb.pag"
>type=CRED_DISP msg=audit(1187033551.889:102): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187033551.893:103): user pid=6656 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1187033935.309:104): avc:  denied  { read write } for  pid=7493 comm="smbd" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187033935.309:104): arch=40000003 syscall=11 success=yes exit=0 a0=9956560 a1=9956760 a2=9956610 a3=99563b0 items=0 ppid=7492 pid=7493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187033935.309:104):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187034074.482:105): avc:  denied  { read write } for  pid=7618 comm="nmbd" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:nmbd_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034074.482:105): arch=40000003 syscall=11 success=yes exit=0 a0=8ffafe8 a1=8ffb488 a2=8ffb328 a3=8ffad80 items=0 ppid=7617 pid=7618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="nmbd" exe="/usr/sbin/nmbd" subj=user_u:system_r:nmbd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034074.482:105):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187034113.517:106): avc:  denied  { read write } for  pid=7636 comm="iptables" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:iptables_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034113.517:106): arch=40000003 syscall=11 success=yes exit=0 a0=9c1d307 a1=9614938 a2=8bacf50 a3=9c5486d items=0 ppid=7634 pid=7636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iptables" exe="/sbin/iptables" subj=user_u:system_r:iptables_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034113.517:106):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187034114.076:107): avc:  denied  { read write } for  pid=7640 comm="ifconfig" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:ifconfig_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034114.076:107): arch=40000003 syscall=11 success=yes exit=0 a0=89a27e0 a1=89a2b20 a2=89a29a0 a3=89a2648 items=0 ppid=7639 pid=7640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ifconfig" exe="/sbin/ifconfig" subj=user_u:system_r:ifconfig_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034114.076:107):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187034129.592:108): avc:  denied  { append } for  pid=7644 comm="iptables-save" name="miniserv.error" dev=hda10 ino=769936 scontext=user_u:system_r:iptables_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034129.592:108): arch=40000003 syscall=11 success=yes exit=0 a0=8f74691 a1=8f735a8 a2=8bb2668 a3=8c58515 items=0 ppid=7642 pid=7644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iptables-save" exe="/sbin/iptables-save" subj=user_u:system_r:iptables_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034129.592:108):  path="/var/webmin/miniserv.error"
>type=AVC msg=audit(1187034236.144:109): avc:  denied  { read write } for  pid=7681 comm="fdisk" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:fsadm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034236.144:109): arch=40000003 syscall=11 success=yes exit=0 a0=8b0d6a0 a1=8b0da70 a2=8b0d8f0 a3=8b0d5a8 items=0 ppid=7680 pid=7681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="fdisk" exe="/sbin/fdisk" subj=user_u:system_r:fsadm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034236.144:109):  path="/var/webmin/sessiondb.pag"
>type=AVC msg=audit(1187034300.275:110): avc:  denied  { append } for  pid=7699 comm="vgdisplay" name="miniserv.error" dev=hda10 ino=769936 scontext=user_u:system_r:lvm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=AVC msg=audit(1187034300.275:110): avc:  denied  { read write } for  pid=7699 comm="vgdisplay" name="sessiondb.pag" dev=hda10 ino=769939 scontext=user_u:system_r:lvm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034300.275:110): arch=40000003 syscall=11 success=yes exit=0 a0=9f4ebfe a1=9cd4708 a2=8c24718 a3=9cd3d28 items=0 ppid=7683 pid=7699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vgdisplay" exe="/usr/sbin/lvm" subj=user_u:system_r:lvm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034300.275:110):  path="/var/webmin/sessiondb.pag"
>type=AVC_PATH msg=audit(1187034300.275:110):  path="/var/webmin/miniserv.error"
>type=AVC msg=audit(1187034352.395:111): avc:  denied  { append } for  pid=7728 comm="smartctl" name="miniserv.error" dev=hda10 ino=769936 scontext=user_u:system_r:fsadm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187034352.395:111): arch=40000003 syscall=11 success=yes exit=0 a0=9c097a8 a1=9c09af0 a2=9c09998 a3=9c095e0 items=0 ppid=7695 pid=7728 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartctl" exe="/usr/sbin/smartctl" subj=user_u:system_r:fsadm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187034352.395:111):  path="/var/webmin/miniserv.error"
>type=USER_END msg=audit(1187034872.541:112): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187034872.553:113): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187035962.967:114): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187035962.970:115): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187035962.971:116): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187035962.987:117): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187035963.011:118): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187035963.012:119): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187036154.493:120): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187036154.496:121): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187036170.167:122): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187036170.169:123): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187036176.037:124): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187036176.039:125): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187036176.042:126): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187036176.048:127): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187036176.072:128): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187036176.074:129): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187036544.943:130): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187036544.944:131): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187036545.029:132): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187036545.030:133): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187036863.621:134): user pid=8686 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187036863.623:135): user pid=8686 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187036863.677:136): user pid=8686 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187036879.493:137): user pid=8686 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1187037018.889:138): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187037018.891:139): user pid=8592 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187037535.071:140): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187037535.072:141): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187038507.707:142): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187038507.709:143): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187038507.712:144): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187038507.720:145): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187038507.743:146): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187038507.745:147): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187041132.862:148): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187041132.864:149): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187041880.491:150): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187041880.494:151): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187041880.496:152): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187041880.502:153): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187041880.525:154): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187041880.527:155): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187043706.228:156): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187043706.229:157): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187045325.527:158): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187045325.529:159): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187045325.532:160): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187045325.538:161): login pid=2303 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187045325.562:162): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187045325.564:163): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187045704.034:164): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187045704.036:165): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187045721.299:166): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187045721.301:167): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187045721.304:168): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187045721.310:169): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187045721.334:170): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187045721.336:171): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187046723.516:172): user pid=10940 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187046723.517:173): user pid=10940 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187046723.531:174): user pid=10940 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187046784.143:175): user pid=10940 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187046825.547:176): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187046825.549:177): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187046825.568:178): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187046825.570:179): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187046843.093:180): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187046843.094:181): user pid=11076 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187048641.599:182): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187048641.608:183): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187048661.065:184): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187048661.068:185): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187048661.070:186): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187048661.094:187): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187048661.123:188): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187048661.125:189): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187048796.686:190): user pid=11534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=lanny : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187048796.687:191): user pid=11534 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=lanny : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187048835.900:192): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187048835.902:193): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187048922.606:194): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187048922.609:195): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187048922.611:196): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187048922.617:197): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187048922.639:198): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187048922.642:199): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187049304.389:200): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187049304.390:201): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187049314.494:202): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187049314.496:203): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187049314.499:204): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187049314.505:205): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187049314.529:206): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187049314.531:207): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187049798.881:208): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187049798.883:209): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187049810.992:210): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187049810.994:211): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187049810.996:212): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187049811.000:213): login pid=2303 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187049811.022:214): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187049811.023:215): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187052200.830:216): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187052200.831:217): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187052200.850:218): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187052200.851:219): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187052249.762:220): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187052249.764:221): user pid=12750 uid=503 auid=503 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187053247.562:222): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187053247.563:223): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187053261.885:224): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187053261.888:225): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187053261.890:226): user pid=2303 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187053261.897:227): login pid=2303 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187053261.921:228): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187053261.923:229): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187053333.355:230): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187053333.357:231): user pid=2303 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187053341.251:7730) auditd normal halt, sending auid=4294967295 pid=13556 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1931
>type=DAEMON_START msg=audit(1187093507.049:1941) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1187093507.148:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187093507.181:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187093526.667:6): user pid=2260 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187094598.752:7): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187094598.755:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187094598.756:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187094598.759:10): login pid=2342 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187094598.782:11): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187094598.783:12): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187094721.147:13): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187094721.149:14): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187094738.205:15): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187094738.208:16): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187094738.210:17): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187094738.232:18): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187094738.254:19): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187094738.256:20): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187098419.013:21): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187098419.014:22): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187098433.980:23): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187098433.982:24): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187098433.984:25): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187098433.991:26): login pid=2342 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187098434.015:27): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187098434.017:28): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187098996.735:29): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187098996.737:30): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187099011.036:31): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187099011.038:32): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187099018.653:33): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187099018.656:34): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187099018.657:35): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187099018.662:36): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187099018.684:37): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187099018.685:38): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187099189.427:39): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187099189.429:40): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187099203.874:41): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187099203.876:42): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187099203.878:43): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187099203.885:44): login pid=2342 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187099203.908:45): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187099203.911:46): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187099373.256:47): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187099373.258:48): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187099380.888:1942) auditd normal halt, sending auid=4294967295 pid=4628 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1187105871.165:8157) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1187105871.264:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187105871.297:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187105892.307:6): user pid=2264 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187105915.247:7): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187105915.250:8): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187105915.252:9): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187105915.257:10): login pid=2340 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187105915.280:11): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187105915.283:12): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187108058.351:13): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187108058.353:14): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187108078.684:15): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187108078.687:16): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187108078.689:17): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187108078.717:18): login pid=2340 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187108078.741:19): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187108078.743:20): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187109073.424:21): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187109073.426:22): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187109285.885:23): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187109285.888:24): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187109285.890:25): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187109285.896:26): login pid=2340 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187109285.919:27): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187109285.921:28): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187112054.722:29): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187112054.724:30): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187112117.580:31): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187112117.583:32): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187112117.585:33): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187112117.592:34): login pid=2340 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187112117.615:35): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187112117.617:36): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187113116.028:37): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187113116.030:38): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187113123.840:8158) auditd normal halt, sending auid=4294967295 pid=4823 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941
>type=DAEMON_START msg=audit(1187120418.725:7108) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1953 res=success, auditd pid=1953
>type=CONFIG_CHANGE msg=audit(1187120418.824:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187120418.857:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187120439.591:6): user pid=2262 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187120453.114:7): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187120453.117:8): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187120453.119:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187120453.123:10): login pid=2352 uid=0 old auid=4294967295 new auid=501
>type=USER_START msg=audit(1187120453.147:11): user pid=2352 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187120453.150:12): user pid=2352 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187137797.209:13): user pid=2352 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187137797.211:14): user pid=2352 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187137805.112:7109) auditd normal halt, sending auid=4294967295 pid=4315 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1953
>type=DAEMON_START msg=audit(1187139944.196:6214) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1942 res=success, auditd pid=1942
>type=CONFIG_CHANGE msg=audit(1187139944.295:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187139944.353:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187139965.012:6): user pid=2293 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187139980.574:7): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187139980.576:8): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187139980.579:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187139980.583:10): login pid=2341 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187139980.607:11): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187139980.610:12): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187142393.571:13): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187142393.574:14): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187142401.115:6215) auditd normal halt, sending auid=4294967295 pid=3315 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1942
>type=DAEMON_START msg=audit(1187173728.654:3585) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1187173728.752:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187173728.785:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187173748.722:6): user pid=2300 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187173765.205:7): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187173765.207:8): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187173765.209:9): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187173765.214:10): login pid=2340 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187173765.238:11): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187173765.240:12): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187175729.719:13): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187175729.721:14): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187175741.873:15): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187175741.876:16): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187175741.877:17): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187175741.915:18): login pid=2340 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187175741.942:19): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187175741.943:20): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187178518.060:21): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187178518.062:22): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187178528.773:23): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187178528.775:24): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187178528.778:25): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187178528.784:26): login pid=2340 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187178528.809:27): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187178528.811:28): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187178698.672:29): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187178698.672:30): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187178706.237:3586) auditd normal halt, sending auid=4294967295 pid=4141 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941
>type=DAEMON_START msg=audit(1187220721.440:6102) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1187220721.539:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187220721.572:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187220742.074:6): user pid=2258 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187220760.185:7): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187220760.188:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187220760.191:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187220760.195:10): login pid=2342 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187220760.219:11): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187220760.221:12): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187222891.102:13): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187222891.104:14): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187222898.889:6103) auditd normal halt, sending auid=4294967295 pid=3378 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1187284754.074:4918) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1942 res=success, auditd pid=1942
>type=CONFIG_CHANGE msg=audit(1187284754.174:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187284754.206:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187284773.735:6): user pid=2246 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187284788.268:7): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187284788.270:8): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187284788.273:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187284788.276:10): login pid=2341 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187284788.300:11): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187284788.303:12): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187285966.393:13): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187285966.396:14): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187285979.034:15): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187285979.037:16): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187285979.038:17): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187285979.080:18): login pid=2341 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187285979.102:19): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187285979.103:20): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187287458.672:21): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187287458.673:22): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187289619.333:23): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187289619.336:24): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187289619.338:25): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187289619.345:26): login pid=2341 uid=0 old auid=503 new auid=503
>type=USER_START msg=audit(1187289619.367:27): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187289619.369:28): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187294569.644:29): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187294569.646:30): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187294580.414:31): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187294580.416:32): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187294580.419:33): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187294580.424:34): login pid=2341 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187294580.448:35): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187294580.450:36): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187294628.528:37): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187294628.530:38): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187301311.674:39): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187301311.676:40): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187301311.678:41): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187301311.685:42): login pid=2341 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187301311.709:43): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187301311.711:44): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187301339.929:45): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187301339.931:46): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187302689.609:47): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187302689.612:48): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187302689.614:49): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187302689.620:50): login pid=2341 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1187302689.644:51): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187302689.646:52): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187304300.790:53): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187304300.791:54): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187304312.032:55): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187304312.035:56): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187304312.037:57): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187304312.044:58): login pid=2341 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1187304312.067:59): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187304312.069:60): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187304921.726:61): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187304921.728:62): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187306142.377:63): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187306142.380:64): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187306142.382:65): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187306142.388:66): login pid=2341 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1187306142.411:67): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187306142.413:68): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187308844.672:69): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187308844.674:70): user pid=2341 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187308852.316:4919) auditd normal halt, sending auid=4294967295 pid=6389 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1942
>type=DAEMON_START msg=audit(1187368819.247:9170) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1940 res=success, auditd pid=1940
>type=CONFIG_CHANGE msg=audit(1187368819.347:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187368819.380:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187368839.956:6): user pid=2284 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187368865.874:7): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187368865.876:8): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187368865.879:9): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187368865.883:10): login pid=2339 uid=0 old auid=4294967295 new auid=501
>type=USER_START msg=audit(1187368865.906:11): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187368865.909:12): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187376546.349:13): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187376546.351:14): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187376559.968:15): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187376559.971:16): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187376559.973:17): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187376559.998:18): login pid=2339 uid=0 old auid=501 new auid=500
>type=USER_START msg=audit(1187376560.027:19): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187376560.029:20): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187378644.422:21): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187378644.423:22): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187378660.997:23): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187378660.998:24): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187378669.066:25): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187378669.069:26): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187378669.070:27): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187378669.110:28): login pid=2339 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187378669.139:29): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187378669.140:30): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187378905.654:31): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187378905.656:32): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187378916.858:33): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187378916.861:34): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187378916.863:35): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187378916.869:36): login pid=2339 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187378916.893:37): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187378916.895:38): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187379370.064:39): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187379370.066:40): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187379386.029:41): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187379386.031:42): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187379386.034:43): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187379386.039:44): login pid=2339 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187379386.062:45): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187379386.065:46): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187380926.900:47): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187380926.902:48): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187380938.814:49): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187380938.817:50): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187380938.818:51): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187380938.824:52): login pid=2339 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187380938.847:53): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187380938.847:54): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187381126.301:55): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187381126.303:56): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187381153.018:57): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187381153.021:58): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187381153.024:59): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187381153.029:60): login pid=2339 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187381153.052:61): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187381153.056:62): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187381400.816:63): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187381400.818:64): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187385083.319:65): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187385083.321:66): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187385083.324:67): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187385083.330:68): login pid=2339 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187385083.355:69): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187385083.357:70): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187388624.217:71): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187388624.219:72): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187390610.343:73): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187390610.345:74): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187390610.348:75): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187390610.353:76): login pid=2339 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187390610.377:77): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187390610.379:78): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187393842.796:79): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187393842.798:80): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187394201.997:81): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187394202.000:82): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187394202.003:83): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187394202.009:84): login pid=2339 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187394202.032:85): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187394202.034:86): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187397023.003:87): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187397023.004:88): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187397031.119:9171) auditd normal halt, sending auid=4294967295 pid=8280 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1940
>type=DAEMON_START msg=audit(1187483257.074:5585) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1187483257.173:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187483257.222:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187483276.991:6): user pid=2290 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187483291.809:7): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187483291.812:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187483291.815:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187483291.819:10): login pid=2342 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187483291.843:11): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187483291.847:12): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187484482.521:13): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187484482.524:14): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187484495.676:15): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187484495.678:16): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187484495.681:17): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187484495.716:18): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187484495.740:19): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187484495.742:20): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187484564.227:21): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187484564.229:22): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187484572.174:5586) auditd normal halt, sending auid=4294967295 pid=3444 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1187543469.117:2611) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1942 res=success, auditd pid=1942
>type=CONFIG_CHANGE msg=audit(1187543469.216:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187543469.265:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187543489.086:6): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187543511.819:7): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187543511.822:8): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187543511.824:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187543511.828:10): login pid=2341 uid=0 old auid=4294967295 new auid=504
>type=USER_START msg=audit(1187543511.851:11): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187543511.854:12): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187548875.424:13): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187548875.425:14): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=melissa : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187548887.175:15): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187548887.177:16): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct= lanny: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187548894.156:17): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187548894.159:18): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187548894.161:19): user pid=2341 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187548894.182:20): login pid=2341 uid=0 old auid=504 new auid=500
>type=USER_START msg=audit(1187548894.206:21): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187548894.208:22): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187548968.279:23): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187548968.281:24): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187548968.387:25): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187548968.389:26): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187548986.821:27): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187548986.825:28): user pid=3176 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187549079.727:29): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187549079.729:30): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187549094.813:2612) auditd normal halt, sending auid=4294967295 pid=4325 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1942
>type=DAEMON_START msg=audit(1187549176.183:8819) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1187549176.283:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187549176.316:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187549195.681:6): user pid=2262 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187549206.714:7): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187549206.716:8): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187549206.719:9): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187549206.723:10): login pid=2340 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187549206.747:11): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187549206.750:12): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187549305.496:13): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187549305.498:14): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187552065.880:15): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187552065.883:16): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187552065.885:17): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187552065.910:18): login pid=2340 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187552065.947:19): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187552065.949:20): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187552142.839:21): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187552142.840:22): user pid=2340 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187552157.048:8820) auditd normal halt, sending auid=4294967295 pid=3317 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941
>type=DAEMON_START msg=audit(1187552341.172:1376) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1940 res=success, auditd pid=1940
>type=CONFIG_CHANGE msg=audit(1187552341.271:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187552341.313:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187552362.119:6): user pid=2253 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187552378.371:7): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187552378.374:8): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187552378.376:9): user pid=2339 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187552378.381:10): login pid=2339 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187552378.404:11): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187552378.407:12): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187554946.525:13): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187554946.527:14): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187554959.044:15): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187554959.047:16): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187554959.048:17): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187554959.069:18): login pid=2339 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187554959.091:19): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187554959.092:20): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187558032.742:21): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187558032.744:22): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187558267.040:23): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187558267.043:24): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187558267.045:25): user pid=2339 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187558267.051:26): login pid=2339 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187558267.074:27): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187558267.076:28): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187559505.375:29): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187559505.377:30): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187559597.400:31): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187559597.402:32): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187559597.405:33): user pid=2339 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187559597.412:34): login pid=2339 uid=0 old auid=500 new auid=501
>type=USER_START msg=audit(1187559597.435:35): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187559597.437:36): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187575181.667:37): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187575181.669:38): user pid=2339 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=pilar : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187575200.926:1377) auditd normal halt, sending auid=4294967295 pid=5370 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1940
>type=DAEMON_START msg=audit(1187609501.670:5464) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941
>type=CONFIG_CHANGE msg=audit(1187609501.770:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187609501.901:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187609522.651:6): user pid=2245 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187610029.048:7): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187610029.050:8): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187610029.053:9): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187610029.056:10): login pid=2340 uid=0 old auid=4294967295 new auid=503
>type=USER_START msg=audit(1187610029.080:11): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187610029.083:12): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187610767.009:13): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187610767.011:14): user pid=2340 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187615684.587:5465) auditd normal halt, sending auid=4294967295 pid=4004 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941
>type=DAEMON_START msg=audit(1187625364.534:4433) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1187625364.634:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187625364.657:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187625384.769:6): user pid=2246 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187625399.426:7): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187625399.429:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187625399.431:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187625399.435:10): login pid=2342 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187625399.458:11): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187625399.460:12): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187627438.033:13): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187627438.035:14): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187627450.952:15): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187627450.955:16): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187627450.957:17): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187627450.979:18): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187627451.003:19): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187627451.005:20): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187631755.070:21): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187631755.071:22): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187631767.456:23): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187631767.458:24): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187631767.459:25): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187631767.464:26): login pid=2342 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187631767.486:27): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187631767.487:28): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187631885.864:29): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187631885.865:30): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187631901.195:31): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187631901.197:32): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187631901.200:33): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187631901.206:34): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187631901.229:35): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187631901.231:36): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187632018.049:37): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187632018.051:38): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187632027.683:39): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187632027.685:40): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187632027.688:41): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187632027.694:42): login pid=2342 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187632027.717:43): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187632027.719:44): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187632993.453:45): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187632993.454:46): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187634098.895:47): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187634098.897:48): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187634098.900:49): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187634098.905:50): login pid=2342 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187634098.929:51): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187634098.931:52): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187634250.852:53): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187634250.854:54): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187634265.252:55): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1187634265.254:56): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1187634273.124:57): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187634273.127:58): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187634273.128:59): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187634273.133:60): login pid=2342 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187634273.154:61): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187634273.155:62): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187634701.345:63): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187634701.347:64): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187637862.118:65): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187637862.121:66): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187637862.123:67): user pid=2342 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187637862.131:68): login pid=2342 uid=0 old auid=503 new auid=500
>type=USER_START msg=audit(1187637862.154:69): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187637862.156:70): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187639067.611:71): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187639067.850:72): user pid=2342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187639158.277:4434) auditd normal halt, sending auid=4294967295 pid=7021 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1943
>type=DAEMON_START msg=audit(1187639273.168:7454) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1942 res=success, auditd pid=1942
>type=CONFIG_CHANGE msg=audit(1187639273.269:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187639273.317:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187639292.327:6): user pid=2246 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187639307.082:7): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187639307.085:8): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187639307.087:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187639307.091:10): login pid=2341 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187639307.115:11): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187639307.117:12): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187642027.219:13): user pid=2870 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187642027.220:14): user pid=2870 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187642027.348:15): user pid=2870 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187642172.494:16): user pid=2870 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187643342.807:17): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187643342.808:18): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187643342.843:19): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187643342.845:20): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187644421.924:21): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187644421.949:22): user pid=3053 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187645125.589:23): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187645125.618:24): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187646407.308:25): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187646407.311:26): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187646407.313:27): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187646407.328:28): login pid=2341 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187646407.358:29): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187646407.360:30): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1187647407.399:31): avc:  denied  { append } for  pid=3948 comm="vgdisplay" name="miniserv.error" dev=hda10 ino=769936 scontext=system_u:system_r:lvm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187647407.399:31): arch=40000003 syscall=11 success=yes exit=0 a0=a68d69a a1=a68d7f0 a2=9638850 a3=a38aba3 items=0 ppid=3941 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="vgdisplay" exe="/usr/sbin/lvm" subj=system_u:system_r:lvm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187647407.399:31):  path="/var/webmin/miniserv.error"
>type=AVC msg=audit(1187647438.194:32): avc:  denied  { append } for  pid=3991 comm="smartctl" name="miniserv.error" dev=hda10 ino=769936 scontext=system_u:system_r:fsadm_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187647438.194:32): arch=40000003 syscall=11 success=yes exit=0 a0=84c1710 a1=84c1a50 a2=84c1900 a3=84c1548 items=0 ppid=3956 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartctl" exe="/usr/sbin/smartctl" subj=system_u:system_r:fsadm_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187647438.194:32):  path="/var/webmin/miniserv.error"
>type=AVC msg=audit(1187647486.828:33): avc:  denied  { append } for  pid=3997 comm="hwclock" name="miniserv.error" dev=hda10 ino=769936 scontext=system_u:system_r:hwclock_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
>type=SYSCALL msg=audit(1187647486.828:33): arch=40000003 syscall=11 success=yes exit=0 a0=96601c5 a1=96604f8 a2=9298e10 a3=92dda6d items=0 ppid=3995 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hwclock" exe="/sbin/hwclock" subj=system_u:system_r:hwclock_t:s0 key=(null)
>type=AVC_PATH msg=audit(1187647486.828:33):  path="/var/webmin/miniserv.error"
>type=USER_AUTH msg=audit(1187647639.958:34): user pid=4019 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187647639.960:35): user pid=4019 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187647640.044:36): user pid=4019 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187647668.181:37): user pid=4019 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187647717.146:38): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187647717.148:39): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187647717.170:40): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187647717.172:41): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187647721.729:42): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187647721.732:43): user pid=4122 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187649457.990:44): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187649457.991:45): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187649458.010:46): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187649458.011:47): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187649661.001:48): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187649661.003:49): user pid=4365 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187649713.720:50): user pid=4420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187649713.722:51): user pid=4420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187649713.734:52): user pid=4420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187649923.779:53): user pid=4420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187650011.118:54): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187650011.119:55): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187650011.135:56): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187650011.138:57): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187650019.386:58): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187650019.387:59): user pid=4478 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187650283.611:60): user pid=4621 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1187650289.939:61): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187650289.941:62): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187650289.959:63): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187650289.961:64): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187651168.472:65): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187651168.474:66): user pid=4623 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187651547.792:67): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187651547.793:68): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187652841.138:69): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187652841.141:70): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187652841.143:71): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187652841.149:72): login pid=2341 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1187652841.189:73): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187652841.191:74): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187653043.378:75): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187653043.379:76): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187653043.397:77): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187653043.399:78): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187653621.412:79): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187653621.414:80): user pid=5332 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187654960.554:81): user pid=5641 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187654960.556:82): user pid=5641 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187654960.568:83): user pid=5641 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187655076.302:84): user pid=5641 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187655304.877:85): user pid=5712 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187655304.879:86): user pid=5712 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187655304.893:87): user pid=5712 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187655401.083:88): user pid=5712 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187655452.296:89): user pid=5722 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187655474.117:90): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187655474.119:91): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187655474.154:92): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187655474.156:93): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187655526.269:94): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187655526.272:95): user pid=5724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187655598.456:96): user pid=5801 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187655598.456:97): user pid=5801 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187655598.467:98): user pid=5801 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187655683.964:99): user pid=5801 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187655702.146:100): user pid=5814 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187655714.809:101): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187655714.811:102): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187655714.829:103): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187655714.831:104): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187656169.006:105): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187656169.009:106): user pid=5856 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187656194.220:107): user pid=5936 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1187656203.353:108): user pid=5937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1187656209.924:109): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187656209.925:110): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187656209.942:111): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187656209.944:112): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187656642.734:113): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187656642.739:114): user pid=5938 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187656653.456:115): user pid=5992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1187656653.457:116): user pid=5992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1187656653.470:117): user pid=5992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1187656913.786:118): user pid=5992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1187656951.181:119): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187656951.183:120): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187656951.205:121): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187656951.206:122): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187657000.279:123): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187657000.281:124): user pid=6083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1187657261.648:125): user pid=6197 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187657369.167:126): user pid=6243 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187657400.701:127): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187657400.703:128): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187657400.721:129): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187657400.723:130): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187657696.731:131): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187657696.733:132): user pid=6284 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187661877.723:133): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187661877.726:134): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1187661887.117:7455) auditd normal halt, sending auid=4294967295 pid=7007 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1942
>type=DAEMON_START msg=audit(1187705049.802:6851) auditd start, ver=1.3.1, format=raw, auid=4294967295 pid=1942 res=success, auditd pid=1942
>type=CONFIG_CHANGE msg=audit(1187705049.902:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1187705049.926:5): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_ERR msg=audit(1187705070.445:6): user pid=2284 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1187705102.668:7): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187705102.670:8): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187705102.673:9): user pid=2341 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187705102.677:10): login pid=2341 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1187705102.702:11): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187705102.704:12): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187705911.647:13): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1187705911.649:14): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1187705911.756:15): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1187705911.758:16): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1187705976.727:17): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187705976.729:18): user pid=2785 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1187706576.213:19): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187706576.215:20): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=lanny : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187706590.369:21): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187706590.371:22): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187706590.374:23): user pid=2341 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187706590.380:24): login pid=2341 uid=0 old auid=500 new auid=503
>type=USER_START msg=audit(1187706590.418:25): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187706590.420:26): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=503: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1187706962.656:27): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1187706962.658:28): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=mailing-lists : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1187706974.944:29): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1187706974.946:30): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1187706974.947:31): user pid=2341 uid=0 auid=503 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1187706974.953:32): login pid=2341 uid=0 old auid=503 new auid=0
>type=USER_START msg=audit(1187706974.953:33): user pid=2341 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1187706974.954:34): user pid=2341 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dell2400.homelan, addr=127.0.0.1, terminal=:0 res=success)'

Actions: View

Attachments on bug 253636: 161982