Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 194701 Details for
Bug 289371
setroubleshootd is killed by SELinux?
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit-log
audit.log (text/plain), 1.38 MB, created by
Matěj Cepl
on 2007-09-13 15:03:05 UTC
(
hide
)
Description:
audit-log
Filename:
MIME Type:
Creator:
Matěj Cepl
Created:
2007-09-13 15:03:05 UTC
Size:
1.38 MB
patch
obsolete
>type=DAEMON_START msg=audit(1187903970.036:6424) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2299 res=success, auditd pid=2299 >type=CONFIG_CHANGE msg=audit(1187903969.982:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187903969.982:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1187903969.982:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187903969.982:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USYS_CONFIG msg=audit(1187904024.241:32): user pid=3130 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1187904055.236:33): user pid=3170 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ERR msg=audit(1187904095.730:34): user pid=3213 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1187904109.228:35): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1187904109.228:36): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1187904109.228:37): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1187904109.228:38): login pid=3283 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1187904109.228:39): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1187904109.228:40): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1187904145.223:41): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1187904145.223:42): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1187904145.723:43): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1187904162.720:44): user pid=3580 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1187904190.216:45): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1187904190.216:46): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1187904190.216:47): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1187904210.713:48): user pid=3610 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1187904259.205:49): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1187904259.205:50): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1187904259.205:51): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1187904259.205:52): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1187906461.369:53): user pid=3883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1187906461.369:54): user pid=3883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1187906461.369:55): login pid=3883 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1187906461.369:56): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1187906461.369:57): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1187906461.369:58): user pid=3883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1187906775.321:59): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1187906775.321:60): user pid=3783 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1187906790.819:61): user pid=3993 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1187906790.819:62): user pid=3993 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1187906801.317:63): user pid=3994 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1187906804.817:64): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1187906804.817:65): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1187906804.817:66): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1187906804.817:67): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1187906879.805:68): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1187906879.805:69): user pid=3996 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1187906910.301:70): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1187906910.301:71): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1187906910.301:72): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1187906910.301:73): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1187907382.229:74): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1187907382.229:75): user pid=4116 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1187907451.218:76): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1187907451.218:77): user pid=3283 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1187907460.334:6425) auditd normal halt, sending auid=4294967295 pid=4851 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2299 >type=DAEMON_START msg=audit(1187907634.249:387) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144 >type=CONFIG_CHANGE msg=audit(1187907634.156:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187907634.156:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1187907634.156:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187907634.156:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1187907653.653:32): user pid=2968 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1187907893.617:33): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1187907893.617:34): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1187907893.617:35): login pid=2962 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1187907893.617:36): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1187907893.617:37): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1187907893.617:38): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1187907893.617:39): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1187907900.116:40): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1187907900.116:41): user pid=2963 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1187907900.116:42): login pid=2963 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1187907900.116:43): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1187907900.116:44): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1187907900.116:45): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1187907900.116:46): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1187908621.506:47): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1187908621.506:48): user pid=2963 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1187908623.006:49): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1187908623.006:50): user pid=2962 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1187908642.265:388) auditd normal halt, sending auid=4294967295 pid=4125 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144 >type=DAEMON_START msg=audit(1187908716.615:1564) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2176 res=success, auditd pid=2176 >type=CONFIG_CHANGE msg=audit(1187908716.276:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187908716.276:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1187908716.276:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187908716.276:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1187908736.273:32): user pid=3036 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1187908749.271:33): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1187908749.271:34): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1187908749.271:35): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1187908749.271:36): login pid=3107 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1187908749.271:37): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1187908749.271:38): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1187908851.255:39): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1187908851.255:40): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1187908851.255:41): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1187908938.242:42): user pid=3487 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1187908989.234:43): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1187908989.234:44): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1187909005.732:45): user pid=3030 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1187909005.732:46): user pid=3030 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1187909005.732:47): login pid=3030 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1187909005.732:48): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1187909005.732:49): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1187909005.732:50): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1187909005.732:51): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1187909036.727:52): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1187909036.727:53): user pid=3030 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1187909041.286:1565) auditd normal halt, sending auid=4294967295 pid=4225 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2176 >type=DAEMON_START msg=audit(1187939471.526:5082) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2248 res=success, auditd pid=2248 >type=CONFIG_CHANGE msg=audit(1187939471.721:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187939471.721:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1187939471.721:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187939471.721:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1187939491.718:32): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1187939513.214:33): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1187939513.214:34): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1187939513.214:35): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1187939513.214:36): login pid=3180 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1187939513.214:37): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1187939513.214:38): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1187939518.713:39): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1187939518.713:40): user pid=3180 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1187939545.021:5083) auditd normal halt, sending auid=4294967295 pid=3842 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2248 >type=DAEMON_START msg=audit(1187986480.049:8652) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2252 res=success, auditd pid=2252 >type=CONFIG_CHANGE msg=audit(1187986479.901:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187986479.901:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1187986479.901:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1187986479.901:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1187986500.398:32): user pid=3116 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1187986600.383:33): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1187986600.383:34): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1187986600.383:35): login pid=3110 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1187986600.883:36): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1187986600.883:37): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1187986600.883:38): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1187986600.883:39): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1187986604.882:40): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1187986604.882:41): user pid=3110 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1187986609.382:42): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1187986609.382:43): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1187986609.382:44): user pid=3186 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1187986609.382:45): login pid=3186 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1187986609.382:46): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1187986609.382:47): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1187986622.880:48): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1187986622.880:49): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1187986691.869:50): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1187986691.869:51): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1187986691.869:52): login pid=3283 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1187986691.869:53): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1187986691.869:54): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1187986691.869:55): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1187986691.869:56): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1187986739.862:57): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1187986739.862:58): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1187986739.862:59): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1187986739.862:60): login pid=3186 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1187986739.862:61): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1187986739.862:62): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1187987049.315:63): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1187987049.315:64): user pid=3186 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188158462.291:65): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188158462.291:66): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188158462.291:67): login pid=4131 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188158462.291:68): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188158462.291:69): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188158462.291:70): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188159414.880:71): user pid=3111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188159414.880:72): user pid=3111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188159414.880:73): login pid=3111 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188159414.880:74): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188159414.880:75): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188159414.880:76): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188159414.880:77): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188160017.324:78): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188160017.324:79): user pid=3111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188160040.823:80): user pid=7513 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188160040.823:81): user pid=7513 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188160040.823:82): login pid=7513 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188160041.323:83): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188160041.323:84): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188160041.323:85): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188160041.323:86): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188160583.291:87): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188160583.291:88): user pid=7513 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188160665.287:89): user pid=8335 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188160665.287:90): user pid=8335 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188160665.287:91): login pid=8335 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188160665.287:92): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188160665.287:93): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188160665.287:94): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188160665.287:95): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188160726.783:96): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188160726.783:97): user pid=3112 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1188160726.783:98): login pid=3112 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188160726.783:99): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1188160726.783:100): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1188160726.783:101): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1188160726.783:102): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188162061.686:103): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188162061.686:104): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188162061.686:105): login pid=10077 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188162061.686:106): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188162061.686:107): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188162061.686:108): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188163604.447:109): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1188163604.447:110): user pid=3112 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1188163750.927:111): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188163750.927:112): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1188163750.927:113): login pid=4247 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188163750.927:114): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1188163750.927:115): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1188163750.927:116): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1188163750.927:117): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188165661.467:118): user pid=4820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188165661.467:119): user pid=4820 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188165661.467:120): login pid=4820 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188165661.467:121): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188165661.467:122): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188165661.467:123): user pid=4820 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188169059.931:124): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1188169059.931:125): user pid=4247 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188169261.418:126): user pid=5617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188169261.418:127): user pid=5617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188169261.418:128): login pid=5617 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188169261.418:129): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188169261.918:130): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188169261.918:131): user pid=5617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188169763.899:132): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188169763.899:133): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1188169763.899:134): login pid=5532 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188169763.899:135): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1188169763.899:136): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1188169763.899:137): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1188169763.899:138): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1188170148.386:139): user pid=3113 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1188170148.386:140): user pid=3113 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=LOGIN msg=audit(1188170148.386:141): login pid=3113 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188170148.386:142): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1188170148.386:143): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1188170148.386:144): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_LOGIN msg=audit(1188170148.386:145): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_DISP msg=audit(1188170171.885:146): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1188170171.885:147): user pid=3113 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1188170395.879:148): user pid=5944 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1188170395.879:149): user pid=5944 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=LOGIN msg=audit(1188170395.879:150): login pid=5944 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188170395.879:151): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1188170395.879:152): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1188170395.879:153): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_LOGIN msg=audit(1188170395.879:154): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_DISP msg=audit(1188170423.378:155): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1188170423.378:156): user pid=5944 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1188172860.926:157): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188172860.926:158): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188172860.926:159): login pid=6700 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188172860.926:160): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188172861.426:161): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188172861.426:162): user pid=6700 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188176462.470:163): user pid=7493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188176462.470:164): user pid=7493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188176462.470:165): login pid=7493 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188176462.470:166): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188176462.470:167): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188176462.470:168): user pid=7493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188180061.996:169): user pid=8250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188180061.996:170): user pid=8250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188180061.996:171): login pid=8250 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188180061.996:172): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188180061.996:173): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188180061.996:174): user pid=8250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188180120.998:175): user pid=8287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188180120.998:176): user pid=8287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188180120.998:177): login pid=8287 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188180120.998:178): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188181803.513:179): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188181803.513:180): user pid=8287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188183662.046:181): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188183662.046:182): user pid=9537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188183662.046:183): login pid=9537 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188183662.046:184): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188183662.046:185): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188183662.046:186): user pid=9537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188187261.591:187): user pid=10385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188187261.591:188): user pid=10385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188187261.591:189): login pid=10385 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188187261.591:190): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188187261.591:191): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188187261.591:192): user pid=10385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188190033.125:193): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188190033.125:194): user pid=8335 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188190039.125:195): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1188190039.125:196): user pid=5532 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1188190181.626:197): user pid=11034 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188190181.626:198): user pid=11034 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188190181.626:199): login pid=11034 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188190181.626:200): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188190181.626:201): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188190181.626:202): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188190182.126:203): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188190209.627:204): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1188190209.627:205): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1188190209.627:206): user pid=11064 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1188190209.627:207): login pid=11064 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188190209.627:208): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1188190209.627:209): user pid=11115 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=/dev/pts/0 res=success)' >type=CRED_REFR msg=audit(1188190209.627:210): user pid=11115 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1188190861.634:211): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188190861.634:212): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188190861.634:213): login pid=11330 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188190861.634:214): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188190861.634:215): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188190861.634:216): user pid=11330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188192626.652:217): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188192626.652:218): user pid=11034 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188192649.152:219): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188192649.152:220): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188192649.152:221): login pid=11787 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188192649.152:222): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188192649.152:223): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188192649.152:224): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188192649.152:225): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188192742.653:226): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1188192742.653:227): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1188192742.653:228): user pid=11881 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1188192742.653:229): login pid=11881 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188192742.653:230): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1188192742.653:231): user pid=11885 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1188192774.153:232): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1188192774.153:233): user pid=11881 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1188192970.156:234): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1188192970.156:235): user pid=11064 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1188192970.656:236): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188192970.656:237): user pid=11787 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188192971.156:238): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188192971.156:239): user pid=3283 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1188192981.900:8653) auditd normal halt, sending auid=4294967295 pid=12505 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2252 >type=DAEMON_START msg=audit(1188202697.848:2123) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2304 res=success, auditd pid=2304 >type=CONFIG_CHANGE msg=audit(1188202697.532:28): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188202697.532:29): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188202697.532:30): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188202697.532:31): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188202715.530:32): avc: denied { search } for pid=3146 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1188202715.530:32): arch=40000003 syscall=5 success=no exit=-13 a0=8116d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1188202715.530:33): avc: denied { search } for pid=3149 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1188202715.530:33): arch=40000003 syscall=5 success=no exit=-13 a0=9bb5d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1188202715.530:34): avc: denied { search } for pid=3150 comm="procmail" name="root" dev=dm-0 ino=5064161 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=dir >type=SYSCALL msg=audit(1188202715.530:34): arch=40000003 syscall=5 success=no exit=-13 a0=9ed0d90 a1=8000 a2=0 a3=8000 items=0 ppid=2666 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ERR msg=audit(1188202718.530:35): user pid=3166 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188202740.530:36): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188202740.530:37): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188202740.530:38): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188202740.530:39): login pid=3255 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188202740.530:40): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188202740.530:41): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188202996.525:42): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188202996.525:43): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188202996.525:44): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188202996.525:45): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1188203159.022:46): avc: denied { getattr } for pid=3811 comm="named" name="random" dev=dm-0 ino=1274849 scontext=user_u:system_r:named_t:s0 tcontext=system_u:object_r:named_conf_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1188203159.022:46): arch=40000003 syscall=195 success=no exit=-13 a0=b7eb3068 a1=b7eac0c8 a2=4b7ff4 a3=3 items=0 ppid=3809 pid=3811 auid=500 uid=25 gid=25 euid=25 suid=25 fsuid=25 egid=25 sgid=25 fsgid=25 tty=(none) comm="named" exe="/usr/sbin/named" subj=user_u:system_r:named_t:s0 key=(null) >type=AVC_PATH msg=audit(1188203159.022:46): path="/dev/random" >type=USER_ACCT msg=audit(1188205260.982:47): user pid=3913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188205260.982:48): user pid=3913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188205260.982:49): login pid=3913 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188205260.982:50): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188205260.982:51): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188205260.982:52): user pid=3913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188208463.421:53): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188208463.421:54): user pid=3726 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188208860.913:55): user pid=4063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188208860.913:56): user pid=4063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188208860.913:57): login pid=4063 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188208860.913:58): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188208860.913:59): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188208860.913:60): user pid=4063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188209276.905:61): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188209276.905:62): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188209276.905:63): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188209276.905:64): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188210894.374:65): user pid=4406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188210894.374:66): user pid=4406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188210897.374:67): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188210897.374:68): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188210897.374:69): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188210897.374:70): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188212460.844:71): user pid=4489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188212460.844:72): user pid=4489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188212460.844:73): login pid=4489 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188212460.844:74): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188212460.844:75): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188212460.844:76): user pid=4489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188216061.276:77): user pid=4601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1188216061.276:78): user pid=4601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1188216061.276:79): login pid=4601 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188216061.276:80): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188216061.276:81): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188216061.276:82): user pid=4601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188217297.752:83): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188217297.752:84): user pid=4077 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_CHAUTHTOK msg=audit(1188218173.735:85): user pid=4744 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218330.732:86): user pid=5115 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=ntp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218330.732:87): user pid=5116 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=ntp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218353.732:88): user pid=5141 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218528.729:89): user pid=8475 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218589.728:90): user pid=8635 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218589.728:91): user pid=8636 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1188218600.227:92): user pid=8714 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=tcpdump exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218600.227:93): user pid=8715 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=tcpdump exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218602.227:94): user pid=8757 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpcuser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=AVC msg=audit(1188218604.227:95): avc: denied { search } for pid=8807 comm="rpc.statd" name="sbin" dev=dm-0 ino=4998818 scontext=user_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir >type=SYSCALL msg=audit(1188218604.227:95): arch=40000003 syscall=11 success=no exit=-13 a0=80008a12 a1=bfa63bac a2=bfa63dfc a3=80d93008 items=0 ppid=8806 pid=8807 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=user_u:system_r:rpcd_t:s0 key=(null) >type=AVC msg=audit(1188218604.227:96): avc: denied { search } for pid=8806 comm="rpc.statd" scontext=user_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir >type=SYSCALL msg=audit(1188218604.227:96): arch=40000003 syscall=5 success=no exit=-13 a0=80009054 a1=8001 a2=0 a3=8001 items=0 ppid=8805 pid=8806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=user_u:system_r:rpcd_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1188218698.725:97): user pid=9100 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218750.224:98): user pid=9245 uid=0 auid=500 subj=user_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1188218750.724:99): user pid=9246 uid=0 auid=500 subj=user_u:system_r:useradd_t:s0 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AVC msg=audit(1188218927.721:100): user pid=2463 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1188218927.721:101): policy loaded auid=500 >type=SYSCALL msg=audit(1188218927.721:101): arch=40000003 syscall=4 success=yes exit=1571286 a0=4 a1=b7dc8000 a2=17f9d6 a3=bff47988 items=0 ppid=9602 pid=9603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=CRED_DISP msg=audit(1188219389.304:102): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188219389.304:103): user pid=4408 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188219426.303:104): user pid=12861 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188219426.303:105): user pid=12861 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188219444.802:106): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188219444.802:107): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188219444.802:108): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188219444.802:109): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188219444.802:110): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188219444.802:111): user pid=12863 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188219452.302:112): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188219452.302:113): user pid=3255 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1188219461.879:2124) auditd normal halt, sending auid=4294967295 pid=13490 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2304 >type=DAEMON_START msg=audit(1188219817.406:9978) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2128 res=success, auditd pid=2128 >type=CONFIG_CHANGE msg=audit(1188219817.506:66): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188219817.506:67): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188219817.542:68): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188219817.542:69): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1188219837.685:70): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2837 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188219839.665:71): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188219880.990:72): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188219880.994:73): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188219880.994:74): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188219881.000:75): login pid=3089 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188219881.013:76): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188219881.014:77): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188220299.653:78): user pid=3382 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1188220305.635:79): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188220305.635:80): user pid=3089 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188220308.943:81): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2695 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188220312.438:9979) auditd normal halt, sending auid=4294967295 pid=3984 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2128 >type=DAEMON_START msg=audit(1188220623.194:5804) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2104 res=success, auditd pid=2104 >type=CONFIG_CHANGE msg=audit(1188220623.293:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188220623.293:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188220623.334:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188220623.334:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1188220645.369:9): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188220647.732:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2809 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188220666.555:11): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188220666.559:12): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188220666.559:13): user pid=3058 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188220666.564:14): login pid=3058 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188220666.584:15): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188220666.586:16): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188220953.449:17): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188220953.449:18): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188220953.531:19): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188221102.389:20): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188221102.389:21): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188221102.395:22): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188221188.107:23): user pid=3346 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188221202.208:24): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188221202.208:25): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188221202.214:26): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188221331.297:27): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188221345.959:28): user pid=3458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1188221348.307:29): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188221348.308:30): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188221348.326:31): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188221348.326:32): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188221398.130:33): user pid=3368 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188223261.631:34): user pid=3834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188223399.963:35): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188223399.965:36): user pid=3459 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188223408.788:37): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188223408.788:38): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188223408.801:39): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188223905.358:40): user pid=3860 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188223985.507:41): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188223985.507:42): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188223985.521:43): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188223985.521:44): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188224006.450:45): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188224006.451:46): user pid=3993 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188224128.239:47): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188224128.239:48): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188224128.296:49): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188224128.296:50): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188224172.205:51): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188224172.206:52): user pid=4083 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188224178.064:53): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188224178.064:54): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188224178.085:55): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1188226488.252:56): user pid=5253 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1188226488.444:57): user pid=5257 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188226862.309:58): user pid=5826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188228321.044:59): user pid=5976 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188228324.700:60): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188228324.700:61): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188228324.849:62): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188228324.866:63): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188228347.457:64): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188228347.458:65): user pid=5977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1188228357.100:66): avc: denied { execmod } for pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188228357.100:66): arch=40000003 syscall=125 success=no exit=-13 a0=5103000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188228357.100:66): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188228357.440:67): avc: denied { execmod } for pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188228357.440:67): arch=40000003 syscall=125 success=no exit=-13 a0=1104000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188228357.440:67): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188228357.943:68): avc: denied { execmod } for pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188228357.943:68): arch=40000003 syscall=125 success=no exit=-13 a0=1c91000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188228357.943:68): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188228358.331:69): avc: denied { execmod } for pid=6015 comm="gst-inspect-0.1" name="libtheora.so.0.2.0" dev=dm-0 ino=5005234 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188228358.331:69): arch=40000003 syscall=125 success=no exit=-13 a0=1348000 a1=48000 a2=5 a3=bff7ce60 items=0 ppid=6014 pid=6015 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-inspect-0.1" exe="/usr/bin/gst-inspect-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188228358.331:69): path="/usr/lib/libtheora.so.0.2.0" >type=USER_AUTH msg=audit(1188228420.869:70): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188228420.869:71): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188228420.878:72): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188228420.878:73): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188228446.450:74): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188228446.450:75): user pid=6025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188229273.090:76): user pid=4190 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188229340.409:77): user pid=6133 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188229343.580:78): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188229343.580:79): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188229343.596:80): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188229343.597:81): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188229408.377:82): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188229408.378:83): user pid=6135 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188229417.938:84): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188229417.938:85): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188229417.950:86): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188230461.661:87): user pid=6214 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188231154.611:88): user pid=6174 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188231312.224:89): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188231312.224:90): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188231312.238:91): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188231544.456:92): user pid=6289 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188231601.207:93): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188231601.207:94): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188231601.213:95): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188231608.650:96): user pid=6312 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188231695.729:97): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188231695.730:98): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188231695.735:99): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188231897.559:100): user pid=6320 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188231909.255:101): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188231909.255:102): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188231909.277:103): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188231909.278:104): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188231951.374:105): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188231951.375:106): user pid=6401 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1188232780.499:107): user pid=6629 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188279510.000:108): user pid=6734 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188279566.463:109): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188279566.463:110): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188279566.605:111): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188279566.605:112): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188279953.808:113): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188279953.809:114): user pid=6892 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188279954.489:115): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188279954.490:116): user pid=3058 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188279958.509:117): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2664 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188279967.034:5805) auditd normal halt, sending auid=4294967295 pid=7541 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2104 >type=DAEMON_START msg=audit(1188280144.850:5422) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2103 res=success, auditd pid=2103 >type=CONFIG_CHANGE msg=audit(1188280144.950:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188280144.950:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188280144.999:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188280144.999:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1188280166.777:9): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188280183.806:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2825 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188280198.868:11): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188280198.872:12): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188280198.872:13): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188280198.877:14): login pid=3039 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188280198.897:15): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188280198.899:16): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188280791.142:17): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188280791.142:18): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188280791.217:19): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188280791.218:20): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188280861.302:21): user pid=3456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188280896.094:22): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188280896.094:23): user pid=3395 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188281123.556:24): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188281123.556:25): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188281123.620:26): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188281123.620:27): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188281123.641:28): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188281123.641:29): user pid=3668 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188281181.359:30): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188281181.359:31): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188281181.374:32): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188281181.375:33): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188281290.265:34): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188281290.266:35): user pid=3673 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188281943.348:36): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188281943.349:37): user pid=3039 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188281946.757:38): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2663 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188281950.498:5423) auditd normal halt, sending auid=4294967295 pid=4521 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2103 >type=DAEMON_START msg=audit(1188286015.340:2780) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2122 res=success, auditd pid=2122 >type=CONFIG_CHANGE msg=audit(1188286015.439:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188286015.439:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188286015.488:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188286015.488:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=ANOM_ABEND msg=audit(1188286034.510:9): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2850 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188286037.576:10): user pid=2990 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188286136.633:11): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1188286136.634:12): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1188286140.686:13): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188286140.690:14): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188286140.691:15): user pid=3086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188286140.694:16): login pid=3086 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188286140.715:17): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188286140.716:18): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.localdomain, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188286203.539:19): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188286203.539:20): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188286203.620:21): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188286203.620:22): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188286261.612:23): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188286261.612:24): user pid=3495 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188286956.875:25): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188286956.876:26): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188286956.889:27): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188286956.889:28): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188286962.806:29): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188286962.806:30): user pid=3692 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188287011.932:31): user pid=3731 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188287013.945:32): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188287013.945:33): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188287013.965:34): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188287013.965:35): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188287017.745:36): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188287017.746:37): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188287017.871:38): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188287017.871:39): user pid=3086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188287049.452:40): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2681 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188287053.182:2781) auditd normal halt, sending auid=4294967295 pid=4540 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2122 >type=DAEMON_START msg=audit(1188287133.565:6528) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2179 res=success, auditd pid=2179 >type=CONFIG_CHANGE msg=audit(1188287133.664:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188287133.664:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188287133.713:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188287133.713:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1188287155.314:9): user pid=3167 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188287155.315:10): user pid=3167 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188287155.320:11): login pid=3167 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188287155.532:12): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188287155.543:13): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188287155.555:14): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188287155.570:15): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1188287278.484:16): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=3089 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188287542.345:17): user pid=3168 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188287542.345:18): user pid=3168 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188287542.349:19): login pid=3168 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188287542.528:20): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188287542.531:21): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188287542.531:22): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188287542.531:23): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188287716.791:24): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188287716.793:25): user pid=3168 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188287755.365:26): user pid=3495 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188287755.366:27): user pid=3495 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188287755.367:28): login pid=3495 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188287755.545:29): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188287755.547:30): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188287755.548:31): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188287755.548:32): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188287795.937:33): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188287795.938:34): user pid=3495 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188287890.582:35): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188287890.582:36): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188287890.584:37): login pid=3563 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188287890.664:38): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188287890.666:39): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188287890.667:40): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188287890.667:41): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188287895.159:42): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188287895.159:43): user pid=3563 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188287935.979:44): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188287935.979:45): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188287935.981:46): login pid=3623 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188287936.172:47): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188287936.174:48): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188287936.174:49): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188287936.175:50): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188288061.503:51): user pid=3685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188288140.110:52): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188288140.110:53): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188288140.120:54): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188288140.120:55): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188288453.852:56): user pid=3169 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188288453.853:57): user pid=3169 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1188288453.855:58): login pid=3169 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188288454.034:59): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1188288454.036:60): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1188288454.036:61): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1188288454.037:62): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1188288465.213:63): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188288465.213:64): user pid=3692 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188288487.821:65): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188288487.822:66): user pid=3623 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188288490.926:67): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188288490.926:68): user pid=3772 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188288490.929:69): login pid=3772 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188288491.121:70): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188288491.123:71): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188288491.124:72): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188288491.125:73): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188288493.978:74): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188288493.978:75): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188288493.980:76): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188288493.980:77): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188288533.997:78): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188288533.998:79): user pid=3823 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1188288588.486:80): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4022 comm="named" sig=11 >type=ANOM_ABEND msg=audit(1188288588.486:81): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4023 comm="named" sig=11 >type=ANOM_ABEND msg=audit(1188288610.995:82): auid=0 uid=25 gid=25 subj=root:system_r:named_t:s0 pid=4086 comm="named" sig=11 >type=CRED_ACQ msg=audit(1188288757.240:83): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188288757.242:84): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188288757.243:85): user pid=4155 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188289184.296:86): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: setcred acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188289184.299:87): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188289184.299:88): user pid=4359 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=named : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188289252.130:89): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188289252.138:90): user pid=3772 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188289258.080:91): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1188289258.106:92): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1188289260.734:93): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188289260.734:94): user pid=4379 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188289260.736:95): login pid=4379 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188289260.874:96): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188289260.894:97): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188289260.894:98): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188289260.896:99): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188289269.485:100): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188289269.488:101): user pid=4379 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188291661.949:102): user pid=31153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188295262.094:103): user pid=897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188298861.672:104): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188302461.862:105): user pid=1217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188306061.059:106): user pid=1411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188309661.241:107): user pid=1578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188313261.267:108): user pid=1740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188316861.287:109): user pid=1900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188320461.313:110): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188323602.291:111): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1188323602.291:112): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188323602.299:113): user pid=3169 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1188323602.303:114): user pid=3167 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1188323604.190:115): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2898 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188323613.820:6529) auditd normal halt, sending auid=4294967295 pid=2805 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2179 >type=DAEMON_START msg=audit(1188323746.541:7579) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2112 res=success, auditd pid=2112 >type=CONFIG_CHANGE msg=audit(1188323747.201:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188323747.201:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188323747.234:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188323747.234:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1188323768.768:9): user pid=2980 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188323791.886:10): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188323791.890:11): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188323791.890:12): user pid=3074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188323791.895:13): login pid=3074 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188323791.915:14): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188323791.918:15): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1188323875.784:16): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188323875.785:17): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188323891.427:18): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188323891.431:19): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188323891.431:20): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188323891.440:21): login pid=3074 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1188323891.459:22): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188323891.460:23): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188324061.462:24): user pid=3760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188325093.368:25): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188325093.368:26): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188325093.501:27): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1188325131.493:28): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2840 comm="hald-addon-acpi" sig=11 >type=USER_END msg=audit(1188325436.120:29): user pid=3893 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188326657.129:30): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188326657.129:31): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188326657.143:32): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188327661.733:33): user pid=4179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188329972.821:34): user pid=4063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188329991.977:35): user pid=4507 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188329991.978:36): user pid=4507 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188330017.640:37): user pid=4510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188330024.148:38): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188330024.148:39): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188330024.162:40): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188330024.162:41): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188330031.204:42): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188330031.204:43): user pid=4511 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188330049.499:44): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188330049.499:45): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188330049.506:46): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188330049.506:47): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188330050.882:48): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188330050.882:49): user pid=4516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188330058.018:50): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188330058.018:51): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188330058.038:52): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188330058.038:53): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188330190.564:54): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188330190.564:55): user pid=4521 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188330267.429:56): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188330267.429:57): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188330267.442:58): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188330267.442:59): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188330279.069:60): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188330279.069:61): user pid=17202 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188330914.323:62): user pid=10016 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188330916.608:63): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188330916.609:64): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188330916.624:65): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188330916.625:66): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188331001.143:67): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188331001.143:68): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188331001.156:69): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188331261.142:70): user pid=11310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188331324.041:71): user pid=10063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188331324.196:72): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188331324.197:73): user pid=10017 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188331324.636:74): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188331324.637:75): user pid=3074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188331326.968:76): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2671 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188331339.116:7580) auditd normal halt, sending auid=4294967295 pid=11912 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2112 >type=DAEMON_START msg=audit(1188331429.186:1180) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2116 res=success, auditd pid=2116 >type=CONFIG_CHANGE msg=audit(1188331429.286:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188331429.286:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188331429.297:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188331429.297:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1188331452.103:9): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188331454.777:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2848 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188331477.513:11): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188331477.517:12): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188331477.517:13): user pid=3079 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188331477.522:14): login pid=3079 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188331477.540:15): user pid=3079 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188331477.540:16): user pid=3079 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188331554.388:17): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188331559.474:18): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188331572.480:19): user pid=3582 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188331602.887:20): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188331602.887:21): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188331602.971:22): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188331631.625:23): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188331631.625:24): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188331631.643:25): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188331631.643:26): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188331645.414:27): user pid=3590 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188331650.348:28): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188331650.348:29): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188331650.357:30): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188331688.886:31): user pid=3635 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188331857.141:32): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188331857.141:33): user pid=3599 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188332064.558:34): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188332064.558:35): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188332064.571:36): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188332064.571:37): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188332070.787:38): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188332070.787:39): user pid=4031 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188332091.448:40): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188332091.448:41): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188332091.456:42): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188332091.456:43): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188332091.688:44): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188332091.689:45): user pid=4069 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188332161.753:46): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188332161.754:47): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188332161.768:48): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188332767.065:49): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188332767.066:50): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188332767.198:51): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188332767.208:52): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188332780.758:53): user pid=4193 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188333099.839:54): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188333099.840:55): user pid=9307 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188334451.365:56): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188334451.365:57): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188334451.378:58): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188334451.379:59): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188334463.239:60): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188334463.240:61): user pid=6910 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188334862.051:62): user pid=6969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188335616.741:63): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188335616.741:64): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188335616.755:65): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188336219.425:66): user pid=15867 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188336221.884:67): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188336221.884:68): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188336221.903:69): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188336221.903:70): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188336398.133:71): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188336398.133:72): user pid=15868 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188336755.188:73): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188336755.189:74): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188336755.206:75): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188336755.206:76): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188336896.573:77): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188336896.573:78): user pid=16007 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188336920.102:79): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_END msg=audit(1188336922.205:80): user pid=7179 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188336925.747:81): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188336928.132:82): user pid=16082 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188336932.323:83): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188336932.323:84): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188336932.339:85): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188336932.340:86): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188336937.099:87): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188336937.100:88): user pid=16086 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188337131.213:89): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188337131.214:90): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188337131.232:91): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188337131.232:92): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188337176.677:93): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188337176.678:94): user pid=16164 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188337302.125:95): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188337302.126:96): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188337302.383:97): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188337302.401:98): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1188337461.037:99): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2699 comm="dhcdbd" sig=6 >type=CRED_DISP msg=audit(1188337578.327:100): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188337579.284:101): user pid=4943 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=DAEMON_START msg=audit(1188337713.942:6928) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144 >type=CONFIG_CHANGE msg=audit(1188337714.042:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188337714.042:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188337714.053:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188337714.053:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ERR msg=audit(1188337735.881:9): user pid=3012 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188337750.688:10): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188337750.691:11): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188337750.692:12): user pid=3107 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188337750.697:13): login pid=3107 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188337750.705:14): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188337750.706:15): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188337806.446:16): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2885 comm="hald-addon-acpi" sig=11 >type=USER_ACCT msg=audit(1188338461.902:17): user pid=3834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188339310.210:18): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3871 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1188339450.652:19): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188339450.653:20): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188339450.720:21): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188339450.721:22): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188340060.811:23): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188340060.812:24): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188340060.873:25): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188340166.473:26): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188340166.474:27): user pid=4029 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188342061.972:28): user pid=4869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188342221.788:29): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188342221.789:30): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188342221.806:31): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188342221.807:32): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188342229.940:33): user pid=4110 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188342280.429:34): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188342280.430:35): user pid=4907 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188342469.235:36): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188342469.235:37): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188342469.249:38): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188343943.292:39): user pid=4977 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188344950.803:40): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188344950.803:41): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188344950.814:42): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188344983.340:43): user pid=5747 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188345000.017:44): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188345000.018:45): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188345000.035:46): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188345000.035:47): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188345117.404:48): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188345117.404:49): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188345117.425:50): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188345135.942:51): user pid=5857 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188345283.780:52): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188345283.780:53): user pid=5810 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188345661.008:54): user pid=6011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188346444.694:55): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188346444.694:56): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188346444.715:57): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188346482.700:58): user pid=6139 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188346701.065:59): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188346701.066:60): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188346701.130:61): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188346701.130:62): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188346748.331:63): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188346748.331:64): user pid=6322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188346933.959:65): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188346933.960:66): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188346933.975:67): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188346933.976:68): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188346938.817:69): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188346938.818:70): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188346938.835:71): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188346950.672:72): user pid=6452 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188348333.827:73): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188348333.828:74): user pid=6418 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188349261.117:75): user pid=6623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188349584.499:76): user pid=6838 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188371444.960:77): user pid=6966 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188371809.499:78): user pid=7584 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188376768.074:79): user pid=7697 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188376835.086:80): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188376835.086:81): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188376835.240:82): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188376835.241:83): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188376916.539:84): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188376916.540:85): user pid=7900 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188377158.333:86): user pid=8145 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1188377185.135:87): user pid=8146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188377185.136:88): user pid=8146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188377200.098:89): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188377200.098:90): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188377200.105:91): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188377200.106:92): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188377211.016:93): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188377211.017:94): user pid=8150 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188378061.455:95): user pid=8578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188379546.390:96): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188379546.390:97): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188379546.406:98): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188379546.406:99): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188379553.370:100): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188379553.371:101): user pid=8787 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188379656.556:102): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188379656.556:103): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188379656.571:104): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188379656.571:105): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188379676.076:106): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188379676.076:107): user pid=8834 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188380619.332:108): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188380619.332:109): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188380619.345:110): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188380619.346:111): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188380619.430:112): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188380619.430:113): user pid=9134 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188380633.109:114): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188380633.110:115): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188380633.122:116): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188380633.122:117): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188380633.145:118): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188380633.146:119): user pid=9140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188381661.538:120): user pid=9325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188385261.784:121): user pid=10047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188388861.898:122): user pid=10569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188392462.263:123): user pid=11217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188396061.499:124): user pid=11866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188397340.780:125): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188397340.780:126): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188397340.976:127): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188397340.986:128): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188397736.146:129): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188397736.146:130): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188397736.194:131): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188397754.436:132): user pid=12185 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188398847.499:133): user pid=12396 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188454567.099:134): user pid=12518 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188457261.193:135): user pid=12903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188457638.149:136): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188457638.185:137): user pid=12091 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1188457930.499:138): user pid=13216 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188461083.383:139): user pid=13392 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188463211.558:140): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188463211.559:141): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188463211.704:142): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188463211.704:143): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188463899.710:144): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188463899.711:145): user pid=13917 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188464461.445:146): user pid=14189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188468061.568:147): user pid=14775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188469464.164:148): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188469464.165:149): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188469464.490:150): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188469464.523:151): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188470321.763:152): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188470321.803:153): user pid=15149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188470382.957:154): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188470382.958:155): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188470383.033:156): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188470383.033:157): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=MAC_POLICY_LOAD msg=audit(1188470388.341:158): policy loaded auid=500 >type=SYSCALL msg=audit(1188470388.341:158): arch=40000003 syscall=4 success=yes exit=1571370 a0=4 a1=b7da0000 a2=17fa2a a3=bffb73e8 items=0 ppid=15308 pid=15310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1188470388.393:159): user pid=2309 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=CRED_DISP msg=audit(1188470390.004:160): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188470390.005:161): user pid=15305 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188471661.845:162): user pid=15394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188474082.968:163): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188474082.969:164): user pid=3107 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188474087.507:165): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2705 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188474096.000:6929) auditd normal halt, sending auid=4294967295 pid=16259 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144 >type=DAEMON_START msg=audit(1188474334.303:1818) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2078 res=success, auditd pid=2078 >type=CONFIG_CHANGE msg=audit(1188474334.400:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188474334.440:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=USER_ERR msg=audit(1188474361.076:7): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_START msg=audit(1188474700.403:1229) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2055 res=success, auditd pid=2055 >type=CONFIG_CHANGE msg=audit(1188474700.499:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188474700.539:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=AVC msg=audit(1188474706.556:7): avc: denied { write } for pid=2175 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188474706.556:7): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdc4bd0 a2=63a494 a3=0 items=0 ppid=1 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188474726.623:8): user pid=3201 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_START msg=audit(1188474818.825:532) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2097 res=success, auditd pid=2097 >type=CONFIG_CHANGE msg=audit(1188474818.923:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188474818.963:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=ANOM_PROMISCUOUS msg=audit(1188474846.215:7): dev=peth0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188474846.215:7): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfa0a6f0 a3=1 items=0 ppid=3067 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null) >type=USER_AUTH msg=audit(1188474855.757:8): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188474855.757:9): user pid=3546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188474855.761:10): login pid=3546 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188474855.869:11): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188474855.873:12): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188474855.881:13): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188474855.897:14): user pid=3546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1188474865.647:15): avc: denied { read write } for pid=3665 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1188474865.647:15): avc: denied { use } for pid=3665 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=SYSCALL msg=audit(1188474865.647:15): arch=40000003 syscall=11 success=yes exit=0 a0=9cef9d0 a1=9cef098 a2=9ceef00 a3=0 items=0 ppid=3664 pid=3665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstored" exe="/usr/sbin/xenstored" subj=root:system_r:xenstored_t:s0 key=(null) >type=AVC_PATH msg=audit(1188474865.647:15): path="/dev/tty1" >type=AVC msg=audit(1188474865.655:16): avc: denied { read write } for pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1188474865.655:16): avc: denied { use } for pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=AVC msg=audit(1188474865.655:16): avc: denied { use } for pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=AVC msg=audit(1188474865.655:16): avc: denied { use } for pid=3668 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=SYSCALL msg=audit(1188474865.655:16): arch=40000003 syscall=11 success=yes exit=0 a0=8a28df0 a1=8a1a250 a2=bfd07bb4 a3=87c7b50 items=0 ppid=3663 pid=3668 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenconsoled" exe="/usr/sbin/xenconsoled" subj=root:system_r:xenconsoled_t:s0 key=(null) >type=AVC_PATH msg=audit(1188474865.655:16): path="/dev/tty1" >type=AVC_PATH msg=audit(1188474865.655:16): path="/dev/tty1" >type=AVC_PATH msg=audit(1188474865.655:16): path="/dev/tty1" >type=USER_AUTH msg=audit(1188474873.729:17): user pid=3547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188474873.729:18): user pid=3547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188474873.729:19): login pid=3547 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188474873.881:20): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188474873.885:21): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188474873.885:22): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188474873.969:23): user pid=3547 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1188475108.943:24): avc: denied { write } for pid=4041 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188475108.943:24): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb07910 a2=63a494 a3=0 items=0 ppid=1 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188475112.948:25): user pid=4202 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_START msg=audit(1188475251.695:2789) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2105 res=success, auditd pid=2105 >type=CONFIG_CHANGE msg=audit(1188475251.793:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188475251.833:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=ANOM_PROMISCUOUS msg=audit(1188475279.537:7): dev=peth0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188475279.537:7): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfeaab90 a3=1 items=0 ppid=3081 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:xend_t:s0 key=(null) >type=USER_AUTH msg=audit(1188475288.779:8): user pid=3560 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188475288.779:9): user pid=3560 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188475288.783:10): login pid=3560 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188475288.915:11): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188475288.923:12): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188475288.931:13): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188475288.947:14): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1188475348.648:15): avc: denied { read write } for pid=3670 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1188475348.648:15): avc: denied { use } for pid=3670 comm="xenstored" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenstored_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=SYSCALL msg=audit(1188475348.648:15): arch=40000003 syscall=11 success=yes exit=0 a0=8b67bf0 a1=8b67240 a2=8b66d58 a3=0 items=0 ppid=3669 pid=3670 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstored" exe="/usr/sbin/xenstored" subj=root:system_r:xenstored_t:s0 key=(null) >type=AVC_PATH msg=audit(1188475348.648:15): path="/dev/tty1" >type=AVC msg=audit(1188475348.668:16): avc: denied { read write } for pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=root:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1188475348.668:16): avc: denied { use } for pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=AVC msg=audit(1188475348.668:16): avc: denied { use } for pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=AVC msg=audit(1188475348.668:16): avc: denied { use } for pid=3673 comm="xenconsoled" name="tty1" dev=tmpfs ino=1599 scontext=root:system_r:xenconsoled_t:s0 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=fd >type=SYSCALL msg=audit(1188475348.668:16): arch=40000003 syscall=11 success=yes exit=0 a0=8ed2eb8 a1=8edbb88 a2=bfa8bdd4 a3=8c31a38 items=0 ppid=3668 pid=3673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenconsoled" exe="/usr/sbin/xenconsoled" subj=root:system_r:xenconsoled_t:s0 key=(null) >type=AVC_PATH msg=audit(1188475348.668:16): path="/dev/tty1" >type=AVC_PATH msg=audit(1188475348.668:16): path="/dev/tty1" >type=AVC_PATH msg=audit(1188475348.668:16): path="/dev/tty1" >type=USER_AUTH msg=audit(1188475388.348:17): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188475388.348:18): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188475388.352:19): login pid=3561 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188475388.440:20): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188475388.444:21): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188475388.444:22): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188475388.444:23): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188475526.802:24): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1188475526.802:25): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1188475526.806:26): login pid=3562 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188475526.998:27): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1188475527.006:28): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1188475527.006:29): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1188475527.094:30): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1188475625.519:31): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188475625.527:32): user pid=3561 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188475628.648:33): user pid=4026 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188475628.648:34): user pid=4026 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188475628.648:35): login pid=4026 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188475628.736:36): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188475628.740:37): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188475628.744:38): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188475628.744:39): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188475868.847:40): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1188475868.847:41): user pid=3563 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=LOGIN msg=audit(1188475868.847:42): login pid=3563 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188475868.935:43): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1188475868.939:44): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1188475868.939:45): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_LOGIN msg=audit(1188475868.939:46): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1188476233.989:47): user pid=3564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_ACCT msg=audit(1188476233.989:48): user pid=3564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=LOGIN msg=audit(1188476233.989:49): login pid=3564 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188476234.077:50): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_START msg=audit(1188476234.081:51): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_ACQ msg=audit(1188476234.081:52): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_LOGIN msg=audit(1188476234.081:53): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_DISP msg=audit(1188477149.496:54): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188477149.500:55): user pid=3560 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188477151.717:56): user pid=4528 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188477151.717:57): user pid=4528 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188477151.717:58): login pid=4528 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188477151.805:59): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188477151.809:60): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188477151.809:61): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188477151.809:62): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188477181.803:63): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188477181.803:64): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188477181.819:65): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188477181.819:66): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1188477186.952:67): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188477186.952:68): user pid=4743 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188477259.896:69): user pid=3565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1188477259.896:70): user pid=3565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=LOGIN msg=audit(1188477259.896:71): login pid=3565 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188477259.988:72): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1188477259.992:73): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1188477259.992:74): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1188477259.992:75): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1188477287.438:76): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188477287.438:77): user pid=4528 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188477290.474:78): user pid=4858 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188477290.474:79): user pid=4858 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188477290.474:80): login pid=4858 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188477290.562:81): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188477290.566:82): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188477290.566:83): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188477290.566:84): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1188477306.542:85): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188477306.546:86): user pid=4858 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1188477409.676:87): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1188477409.676:88): user pid=3562 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1188477412.944:89): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1188477412.948:90): user pid=3563 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_DISP msg=audit(1188477414.689:91): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_END msg=audit(1188477414.689:92): user pid=3564 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_AUTH msg=audit(1188477432.817:93): user pid=4900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188477432.817:94): user pid=4900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188477432.817:95): login pid=4900 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188477432.901:96): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188477432.905:97): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188477432.909:98): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188477432.909:99): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1188477555.835:100): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188477555.839:101): user pid=4026 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188477560.092:102): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1188477560.096:103): user pid=3565 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1188477563.773:104): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188477563.789:105): user pid=4900 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188477577.364:106): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188477577.364:107): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188477577.364:108): login pid=5111 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188477577.456:109): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188477577.460:110): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188477577.460:111): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188477577.460:112): user pid=5111 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1188477600.000:113): avc: denied { write } for pid=5279 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188477600.000:113): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfacd8e0 a2=2f4494 a3=0 items=0 ppid=1 pid=5279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188477603.145:114): user pid=5440 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188477614.908:115): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188477614.912:116): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188477614.912:117): user pid=5472 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188477614.916:118): login pid=5472 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188477614.928:119): user pid=5472 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188477614.932:120): user pid=5472 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188477661.237:121): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188477661.237:122): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188477661.265:123): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188477661.265:124): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188478861.586:125): user pid=6153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188478919.066:126): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188478919.070:127): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188478919.126:128): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188479218.074:129): user pid=6163 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188480067.623:130): dev=vif3.0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188480067.623:130): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfa73ea0 a3=1 items=0 ppid=6967 pid=7052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1188480398.858:131): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188480398.858:132): user pid=5872 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188480431.001:133): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188480431.001:134): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188480431.093:135): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188480431.093:136): user pid=7130 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188480445.224:137): dev=vif3.0 prom=0 old_prom=256 auid=4294967295 >type=DAEMON_START msg=audit(1188480689.848:6947) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2122 res=success, auditd pid=2122 >type=CONFIG_CHANGE msg=audit(1188480689.945:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188480689.985:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=USER_ERR msg=audit(1188480714.857:7): user pid=3284 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188480727.584:8): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188480727.584:9): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188480727.588:10): user pid=3366 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188480727.588:11): login pid=3366 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188480727.604:12): user pid=3366 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188480727.604:13): user pid=3366 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188480820.275:14): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188480820.275:15): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188480820.331:16): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188480820.331:17): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188481026.523:18): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188481026.523:19): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188481026.547:20): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188481086.460:21): user pid=4007 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188481222.217:22): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188481222.221:23): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188481222.229:24): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188481249.863:25): user pid=4181 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188481383.560:26): user pid=4315 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1188481387.993:27): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188481387.993:28): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188481388.005:29): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188481388.005:30): user pid=4316 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188481548.919:31): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188481548.919:32): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188481548.927:33): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188481567.335:34): user pid=4434 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188481808.150:35): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188481808.150:36): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188481808.158:37): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188481822.361:38): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188481822.361:39): user pid=3929 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188481868.455:40): user pid=4522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188481981.047:41): dev=vif1.0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188481981.047:41): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=bfc8b8b0 a3=1 items=0 ppid=4586 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1188482248.500:42): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188482248.500:43): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188482248.736:44): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188482248.752:45): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1188482363.145:46): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188482363.145:47): user pid=5188 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188482370.102:48): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188482370.102:49): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188482370.114:50): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188482370.114:51): user pid=5301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188482461.478:52): user pid=5340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188482775.237:53): dev=vif1.0 prom=0 old_prom=256 auid=4294967295 >type=DAEMON_START msg=audit(1188482890.219:8618) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2136 res=success, auditd pid=2136 >type=CONFIG_CHANGE msg=audit(1188482890.316:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188482890.356:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=USER_AUTH msg=audit(1188482955.525:7): user pid=3184 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188482955.525:8): user pid=3184 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188482955.529:9): login pid=3184 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188482955.649:10): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188482955.661:11): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188482955.673:12): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188482955.673:13): user pid=3184 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1188482974.597:14): avc: denied { write } for pid=3385 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275174 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188482974.597:14): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe964a0 a2=1c5494 a3=0 items=0 ppid=1 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188482978.586:15): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188482993.965:16): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188482993.969:17): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188482993.969:18): user pid=3593 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188482993.973:19): login pid=3593 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188482993.989:20): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188482993.989:21): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1188483030.421:22): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188483030.425:23): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188483038.382:24): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188483038.390:25): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188483038.390:26): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188483038.430:27): login pid=3593 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1188483038.442:28): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188483038.442:29): user pid=3593 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1188483181.860:3371) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2128 res=success, auditd pid=2128 >type=CONFIG_CHANGE msg=audit(1188483181.959:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 >type=CONFIG_CHANGE msg=audit(1188483181.995:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 >type=AVC msg=audit(1188483187.191:7): avc: denied { write } for pid=2248 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188483187.191:7): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfec9cd0 a2=63a494 a3=0 items=0 ppid=1 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188483206.355:8): user pid=3237 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188483226.975:9): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188483226.975:10): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188483226.975:11): user pid=3319 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188483226.979:12): login pid=3319 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188483226.995:13): user pid=3319 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188483226.995:14): user pid=3319 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1188483416.942:2492) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2203 res=success, auditd pid=2203 >type=CONFIG_CHANGE msg=audit(1188483417.042:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188483417.042:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188483417.079:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188483417.079:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188483423.526:9): avc: denied { write } for pid=2288 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275175 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188483423.526:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf883690 a2=63a494 a3=0 items=0 ppid=1 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188483436.623:10): user pid=3053 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188483443.788:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2905 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188483460.192:12): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1188483460.225:13): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1188483463.371:14): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188483463.371:15): user pid=3044 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188483463.375:16): login pid=3044 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188483463.682:17): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188483463.693:18): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188483463.694:19): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188483463.710:20): user pid=3044 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188483482.450:21): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188483482.450:22): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188483482.490:23): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1188483485.871:24): avc: denied { read write } for pid=3255 comm="modprobe" name="Xorg.setup.log" dev=dm-0 ino=1275246 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1188483485.871:24): arch=40000003 syscall=11 success=yes exit=0 a0=bf99be78 a1=bf99ae38 a2=bf99c894 a3=400 items=0 ppid=3232 pid=3255 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty9 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188483485.871:24): path="/var/log/Xorg.setup.log" >type=USER_END msg=audit(1188483575.609:25): user pid=3229 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188483606.822:26): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188483606.822:27): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188483606.823:28): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188483851.913:29): user pid=3274 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188484454.738:1326) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2194 res=success, auditd pid=2194 >type=CONFIG_CHANGE msg=audit(1188484454.860:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188484454.860:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188484454.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188484454.897:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188484461.266:9): avc: denied { write } for pid=2279 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275175 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188484461.266:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa97fa0 a2=63a494 a3=0 items=0 ppid=1 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188484475.840:10): user pid=3039 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188484481.352:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2909 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188484510.342:12): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188484510.346:13): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188484510.346:14): user pid=3142 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188484510.351:15): login pid=3142 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188484510.370:16): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188484510.372:17): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188484638.700:18): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188484638.700:19): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188484638.793:20): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188484828.384:21): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188484828.384:22): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188484828.398:23): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188484828.398:24): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188484868.292:25): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188484868.292:26): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188484868.303:27): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188485003.097:28): user pid=3559 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188485021.336:29): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188485021.337:30): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188485087.523:31): user pid=3516 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188485210.654:32): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188485210.655:33): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188485238.096:34): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188485238.099:35): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188485238.100:36): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188485238.108:37): login pid=3142 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1188485238.190:38): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188485238.191:39): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1188485647.814:40): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188485647.815:41): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188485659.284:42): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188485659.287:43): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188485659.288:44): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188485659.294:45): login pid=3142 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1188485659.313:46): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188485659.315:47): user pid=3142 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188486061.877:48): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188486307.321:49): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188486307.322:50): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188486307.338:51): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188486307.339:52): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188486743.726:53): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188486743.727:54): user pid=4717 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188486880.039:55): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188486880.040:56): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188486880.051:57): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188487194.382:58): user pid=4927 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188488080.888:59): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188488080.888:60): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188488080.903:61): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188488777.509:62): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188488777.509:63): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188488777.719:64): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188488777.720:65): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=DAEMON_END msg=audit(1188489318.568:1327) auditd normal halt, sending auid=500 pid=5616 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2194 >type=DAEMON_START msg=audit(1188489318.846:6846): auditd start, ver=1.5.6, format=raw, auid=500 pid=5632 res=success, auditd pid=5632 >type=CONFIG_CHANGE msg=audit(1188489318.946:69): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188489318.946:70): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1188489318.949:71): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188489318.949:72): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=USER_END msg=audit(1188489372.492:73): user pid=5124 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188489445.840:74): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188489445.840:75): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188489445.915:76): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1188489548.722:77): user pid=5771 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1188489548.726:78): user pid=5772 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1188489560.178:79): user pid=5755 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188489565.282:80): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188489565.283:81): user pid=5192 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188489661.105:82): user pid=5917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188490071.373:83): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188490071.374:84): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188490071.390:85): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188490071.391:86): user pid=6004 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188491146.657:87): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188491146.657:87): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9c5aa8 a3=6 items=0 ppid=1 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1188491150.419:88): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188491315.113:89): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188491315.113:89): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9c5aa8 a3=6 items=0 ppid=1 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1188491789.499:90): user pid=6480 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188492599.587:1620): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2199 res=success, auditd pid=2199 >type=CONFIG_CHANGE msg=audit(1188492599.687:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188492599.687:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188492599.707:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188492599.707:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188492605.254:9): avc: denied { write } for pid=2284 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188492605.254:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8966a0 a2=63a494 a3=0 items=0 ppid=1 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1188492619.131:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2992 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188492619.391:11): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188492632.137:12): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188492632.141:13): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188492632.142:14): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188492632.146:15): login pid=3214 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188492632.167:16): user pid=3214 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188492632.169:17): user pid=3214 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188493262.038:18): user pid=3755 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188493550.499:19): user pid=3934 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188539494.285:1286): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2207 res=success, auditd pid=2207 >type=CONFIG_CHANGE msg=audit(1188539494.385:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188539494.385:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188539494.403:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188539494.403:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188539500.029:9): avc: denied { write } for pid=2292 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188539500.029:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc72a80 a2=63a494 a3=0 items=0 ppid=1 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188539514.120:10): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188539541.984:11): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188539541.987:12): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188539541.988:13): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188539541.992:14): login pid=3222 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188539542.012:15): user pid=3222 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188539542.014:16): user pid=3222 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188539664.051:17): user pid=3724 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1188540061.488:18): user pid=3859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188540924.500:19): user pid=4304 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188541151.608:4468): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2199 res=success, auditd pid=2199 >type=CONFIG_CHANGE msg=audit(1188541151.707:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188541151.707:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188541151.718:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188541151.718:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188541157.257:9): avc: denied { write } for pid=2284 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188541157.257:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfd0cb20 a2=63a494 a3=0 items=0 ppid=1 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1188541167.132:10): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2991 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188541171.501:11): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188541193.750:12): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2834 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188541197.779:4469): auditd normal halt, sending auid=4294967295 pid=4132 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2199 >type=DAEMON_START msg=audit(1188547558.594:7928): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2176 res=success, auditd pid=2176 >type=CONFIG_CHANGE msg=audit(1188547558.694:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188547558.694:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188547558.701:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188547558.701:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188547564.666:9): avc: denied { write } for pid=2261 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188547564.666:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe57c60 a2=63a494 a3=0 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188547580.362:10): user pid=3096 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188547653.622:11): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188547653.625:12): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188547653.626:13): user pid=3191 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188547653.631:14): login pid=3191 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188547653.652:15): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188547653.653:16): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188548414.757:17): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188548414.757:18): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188548414.841:19): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188548425.325:20): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188548425.325:20): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b19a8 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1188548426.561:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=3892 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1188548426.597:22): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188548429.468:23): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188548429.468:23): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b19a8 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1188548430.299:24): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=3938 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1188548430.335:25): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188548497.647:26): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188548497.647:26): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1188548653.521:27): dev=vnet1 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188548653.521:27): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1188548710.654:28): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188548711.285:29): dev=vnet1 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188548768.950:30): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188548768.950:30): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b1998 a3=6 items=0 ppid=1 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_END msg=audit(1188548865.437:31): user pid=3881 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188548898.782:32): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188548898.798:33): user pid=3191 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188548928.795:34): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2811 comm="dhcdbd" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1188548933.386:35): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=DAEMON_END msg=audit(1188548944.395:7929): auditd normal halt, sending auid=4294967295 pid=5202 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2176 >type=DAEMON_START msg=audit(1188549173.761:3456): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=2210 res=success, auditd pid=2210 >type=CONFIG_CHANGE msg=audit(1188549173.861:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188549173.861:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188549173.872:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188549173.872:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188549179.895:9): avc: denied { write } for pid=2295 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275171 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188549179.895:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfae2220 a2=63a494 a3=0 items=0 ppid=1 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188549195.239:10): user pid=3130 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188549296.342:11): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188549296.345:12): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188549296.346:13): user pid=3225 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188549296.350:14): login pid=3225 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188549296.393:15): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188549296.395:16): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188549347.429:17): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188549347.430:18): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188549347.522:19): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188549409.930:20): user pid=3607 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188549459.037:21): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188549459.037:22): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188549459.044:23): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188549459.044:24): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188549537.183:25): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188549537.183:26): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188549537.208:27): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188549552.077:28): user pid=3954 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188549554.163:29): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188549554.163:30): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188549554.167:31): user pid=3973 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188549613.704:32): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188549613.704:32): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aae8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1188550862.443:33): user pid=5038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188551240.148:34): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188551240.148:35): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188551240.738:36): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188551240.799:37): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188551301.622:38): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188551425.065:39): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188551425.065:39): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aaf8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1188551429.353:40): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188551450.364:41): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188551450.364:41): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff0aaf8 a3=6 items=0 ppid=1 pid=3845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1188551776.713:42): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1188554461.212:43): user pid=5145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188555744.945:44): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188555744.945:45): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188555745.045:46): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188555756.685:47): user pid=5297 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188555816.660:48): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188555816.660:49): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188555816.665:50): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188555820.395:51): user pid=5308 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188555828.429:52): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188555828.439:53): user pid=5410 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1188555830.253:54): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188555830.255:55): user pid=3758 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188555840.709:56): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188555840.709:57): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188555840.725:58): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188555840.726:59): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1188555854.542:60): avc: denied { getattr } for pid=5389 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:insmod_t:s0 tcontext=root:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1188555854.542:60): arch=40000003 syscall=195 success=no exit=-13 a0=99e7618 a1=bf8af890 a2=816ff4 a3=bf8af890 items=0 ppid=5388 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188555854.542:60): path="/root" >type=AVC msg=audit(1188555854.542:61): avc: denied { search } for pid=5389 comm="sh" name="root" dev=dm-0 ino=5064161 scontext=user_u:system_r:insmod_t:s0 tcontext=root:object_r:user_home_dir_t:s0 tclass=dir >type=SYSCALL msg=audit(1188555854.542:61): arch=40000003 syscall=195 success=no exit=-13 a0=80d47a9 a1=bf8af8a8 a2=816ff4 a3=0 items=0 ppid=5388 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="sh" exe="/bin/bash" subj=user_u:system_r:insmod_t:s0 key=(null) >type=CRED_DISP msg=audit(1188555865.581:62): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188555865.582:63): user pid=5347 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188556595.435:64): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188556595.436:65): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188556595.448:66): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188556595.448:67): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188556609.978:68): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188556609.979:69): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188556609.983:70): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188556610.274:71): user pid=5476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188556618.531:72): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188556618.532:73): user pid=5452 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188556669.659:74): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188556669.659:75): user pid=3225 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188556674.019:76): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2845 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1188556685.476:3457): auditd normal halt, sending auid=4294967295 pid=6314 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2210 >type=DAEMON_START msg=audit(1188556768.621:4747): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1903 res=success, auditd pid=1903 >type=CONFIG_CHANGE msg=audit(1188556768.721:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188556768.721:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188556769.062:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188556769.062:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188556775.663:9): avc: denied { write } for pid=1989 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275162 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188556775.663:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfef5d00 a2=63a494 a3=0 items=0 ppid=1 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188556791.311:10): user pid=2815 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188556791.534:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2701 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188556815.177:12): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188556815.179:13): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188556815.179:14): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188556815.181:15): login pid=2919 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188556815.189:16): user pid=2919 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188556815.190:17): user pid=2919 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188556884.019:18): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188556884.019:19): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188556884.133:20): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188556884.134:21): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188556889.684:22): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188556889.684:23): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188556889.763:24): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188556898.424:25): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188556898.424:25): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdfc308 a3=6 items=0 ppid=1 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_END msg=audit(1188556917.743:26): user pid=3312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188556925.337:27): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188556925.337:28): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188556925.406:29): user pid=3360 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188557020.293:30): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188557020.293:31): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188557020.528:32): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188557022.750:33): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188557022.751:34): user pid=3287 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188557054.547:35): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188557054.548:36): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188557054.560:37): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188557054.561:38): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188557121.096:39): user pid=3375 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188557141.218:40): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1188557148.516:41): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188557148.517:42): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188557148.581:43): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188557158.095:44): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188557158.095:44): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a408 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=CRED_DISP msg=audit(1188557808.559:45): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188557808.587:46): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188558061.938:47): user pid=4247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188558120.213:48): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188558120.213:49): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188558120.459:50): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188558120.472:51): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1188558164.186:52): avc: denied { read write } for pid=4577 comm="modprobe" name="" dev=sockfs ino=54153 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558164.186:52): avc: denied { read write } for pid=4577 comm="modprobe" name="" dev=sockfs ino=54154 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558164.186:52): arch=40000003 syscall=11 success=yes exit=0 a0=9d6ae08 a1=bf903ec8 a2=bf9067a0 a3=9d6ae08 items=0 ppid=4576 pid=4577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558164.186:52): path="socket:[54154]" >type=AVC_PATH msg=audit(1188558164.186:52): path="socket:[54153]" >type=AVC msg=audit(1188558164.272:53): avc: denied { write } for pid=4583 comm="modprobe" name="iptables.qb4580" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file >type=AVC msg=audit(1188558164.272:53): avc: denied { read } for pid=4583 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file >type=AVC msg=audit(1188558164.272:53): avc: denied { read write } for pid=4583 comm="modprobe" name="" dev=sockfs ino=54179 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558164.272:53): avc: denied { read write } for pid=4583 comm="modprobe" name="" dev=sockfs ino=54180 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558164.272:53): arch=40000003 syscall=11 success=yes exit=0 a0=982cf68 a1=bff3cad8 a2=bff3d21c a3=982cf68 items=0 ppid=4582 pid=4583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558164.272:53): path="socket:[54180]" >type=AVC_PATH msg=audit(1188558164.272:53): path="socket:[54179]" >type=AVC_PATH msg=audit(1188558164.272:53): path="/proc/net/ip_tables_names" >type=AVC_PATH msg=audit(1188558164.272:53): path="/tmp/iptables.qb4580" >type=AVC msg=audit(1188558281.632:54): avc: denied { read write } for pid=4641 comm="modprobe" name="" dev=sockfs ino=57772 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558281.632:54): avc: denied { read write } for pid=4641 comm="modprobe" name="" dev=sockfs ino=57773 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558281.632:54): arch=40000003 syscall=11 success=yes exit=0 a0=8354e08 a1=bfabb088 a2=bfabd960 a3=8354e08 items=0 ppid=4640 pid=4641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558281.632:54): path="socket:[57773]" >type=AVC_PATH msg=audit(1188558281.632:54): path="socket:[57772]" >type=AVC msg=audit(1188558282.159:55): avc: denied { read write } for pid=4911 comm="modprobe" name="" dev=sockfs ino=58076 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558282.159:55): avc: denied { read write } for pid=4911 comm="modprobe" name="" dev=sockfs ino=58077 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558282.159:55): arch=40000003 syscall=11 success=yes exit=0 a0=9a20e08 a1=bfca2268 a2=bfca4b40 a3=9a20e08 items=0 ppid=4910 pid=4911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558282.159:55): path="socket:[58077]" >type=AVC_PATH msg=audit(1188558282.159:55): path="socket:[58076]" >type=AVC msg=audit(1188558282.182:56): avc: denied { write } for pid=4917 comm="modprobe" name="iptables.Rw4914" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file >type=AVC msg=audit(1188558282.182:56): avc: denied { read } for pid=4917 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file >type=AVC msg=audit(1188558282.182:56): avc: denied { read write } for pid=4917 comm="modprobe" name="" dev=sockfs ino=58085 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558282.182:56): avc: denied { read write } for pid=4917 comm="modprobe" name="" dev=sockfs ino=58086 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558282.182:56): arch=40000003 syscall=11 success=yes exit=0 a0=9828f68 a1=bfc55368 a2=bfc55aac a3=9828f68 items=0 ppid=4916 pid=4917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558282.182:56): path="socket:[58086]" >type=AVC_PATH msg=audit(1188558282.182:56): path="socket:[58085]" >type=AVC_PATH msg=audit(1188558282.182:56): path="/proc/net/ip_tables_names" >type=AVC_PATH msg=audit(1188558282.182:56): path="/tmp/iptables.Rw4914" >type=AVC msg=audit(1188558527.012:57): avc: denied { read write } for pid=4954 comm="modprobe" name="" dev=sockfs ino=65408 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558527.012:57): avc: denied { read write } for pid=4954 comm="modprobe" name="" dev=sockfs ino=65409 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558527.012:57): arch=40000003 syscall=11 success=yes exit=0 a0=8af5e08 a1=bf9a2838 a2=bf9a5110 a3=8af5e08 items=0 ppid=4953 pid=4954 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558527.012:57): path="socket:[65409]" >type=AVC_PATH msg=audit(1188558527.012:57): path="socket:[65408]" >type=AVC msg=audit(1188558527.587:58): avc: denied { read write } for pid=5224 comm="modprobe" name="" dev=sockfs ino=65712 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558527.587:58): avc: denied { read write } for pid=5224 comm="modprobe" name="" dev=sockfs ino=65713 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558527.587:58): arch=40000003 syscall=11 success=yes exit=0 a0=84c8e08 a1=bf923ee8 a2=bf9267c0 a3=84c8e08 items=0 ppid=5223 pid=5224 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558527.587:58): path="socket:[65713]" >type=AVC_PATH msg=audit(1188558527.587:58): path="socket:[65712]" >type=AVC msg=audit(1188558527.601:59): avc: denied { write } for pid=5230 comm="modprobe" name="iptables.mH5227" dev=dm-0 ino=6044358 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file >type=AVC msg=audit(1188558527.601:59): avc: denied { read } for pid=5230 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file >type=AVC msg=audit(1188558527.601:59): avc: denied { read write } for pid=5230 comm="modprobe" name="" dev=sockfs ino=65721 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188558527.601:59): avc: denied { read write } for pid=5230 comm="modprobe" name="" dev=sockfs ino=65722 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188558527.601:59): arch=40000003 syscall=11 success=yes exit=0 a0=8916f68 a1=bfdd6558 a2=bfdd6c9c a3=8916f68 items=0 ppid=5229 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188558527.601:59): path="socket:[65722]" >type=AVC_PATH msg=audit(1188558527.601:59): path="socket:[65721]" >type=AVC_PATH msg=audit(1188558527.601:59): path="/proc/net/ip_tables_names" >type=AVC_PATH msg=audit(1188558527.601:59): path="/tmp/iptables.mH5227" >type=CRED_DISP msg=audit(1188559425.678:60): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188559425.748:61): user pid=4258 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188561662.020:62): user pid=5358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188561665.388:63): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1188561670.182:64): user pid=3522 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188562550.372:65): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188562550.372:66): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188562550.487:67): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188562550.501:68): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188562676.468:69): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188562676.468:69): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a3f8 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=CRED_DISP msg=audit(1188562925.196:70): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188562925.197:71): user pid=5440 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188563010.755:72): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188563010.755:73): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188563010.850:74): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188563484.480:75): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1188563499.220:76): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1188563499.220:76): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bff9a408 a3=6 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1188565261.750:77): user pid=6123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188565831.511:78): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1188565837.794:79): user pid=5547 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188568179.998:80): user pid=6881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188568179.998:81): user pid=6881 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188568202.612:82): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188568202.613:83): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188568202.711:84): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188568202.732:85): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188568861.317:86): user pid=6977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188569124.138:87): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188569124.139:88): user pid=6883 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188569141.198:89): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188569141.199:90): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188569141.221:91): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188569141.221:92): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188572461.603:93): user pid=7747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188572697.560:94): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188572697.561:95): user pid=7039 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188572725.252:96): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188572725.252:97): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188572725.265:98): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188572725.265:99): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188572725.310:100): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188572725.311:101): user pid=7869 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188576061.699:102): user pid=8617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188579661.744:103): user pid=9050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188582098.507:104): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188582098.508:105): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188582098.565:106): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188582208.674:107): user pid=9265 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188583261.987:108): user pid=9420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188586861.178:109): user pid=9915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188587900.742:110): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188587900.742:111): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188587900.800:112): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188587900.821:113): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188587900.836:114): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188587900.836:115): user pid=10196 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188590461.239:116): user pid=10653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188594061.279:117): user pid=10994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188595746.790:118): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188595746.790:119): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188595746.969:120): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1188596150.371:121): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=11342 comm="telepathy-gabbl" sig=11 >type=USER_CHAUTHTOK msg=audit(1188597092.855:122): user pid=11539 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=bitlbee exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188597112.068:123): user pid=11224 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188597130.027:124): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188597130.028:125): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188597130.132:126): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188597130.153:127): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188597268.888:128): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188597268.890:129): user pid=11576 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188597661.805:130): user pid=11740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188598998.973:131): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12155 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599554.276:132): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12389 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599569.956:133): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12392 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599649.394:134): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12415 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599676.386:135): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12431 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599689.228:136): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12435 comm="testStat" sig=11 >type=ANOM_ABEND msg=audit(1188599729.959:137): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12444 comm="testStat" sig=11 >type=USER_ACCT msg=audit(1188601261.982:138): user pid=12662 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188602402.001:139): user pid=12904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188602900.658:140): user pid=12999 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188602903.530:141): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188602903.530:142): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188602903.543:143): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188602903.543:144): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188603183.279:145): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188603183.279:146): user pid=13001 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188604861.055:147): user pid=13377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188604906.012:148): user pid=13419 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188604908.203:149): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188604908.203:150): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188604908.275:151): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188604908.276:152): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188605099.184:153): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188605099.211:154): user pid=13420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188606646.965:155): user pid=13675 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188606649.335:156): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188606649.335:157): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188606649.377:158): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188606649.377:159): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188606674.678:160): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188606674.678:161): user pid=13676 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188607648.866:162): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188607648.867:163): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188607648.892:164): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188607648.892:165): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188607934.025:166): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188607934.026:167): user pid=14333 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188607939.699:168): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188607939.700:169): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188607939.764:170): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188607939.765:171): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188608461.283:172): user pid=14502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188608713.078:173): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188608713.079:174): user pid=14422 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1188609031.499:175): user pid=14729 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188630143.608:4389): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1919 res=success, auditd pid=1919 >type=CONFIG_CHANGE msg=audit(1188630143.708:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188630143.708:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188630143.973:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188630143.973:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188630150.837:9): avc: denied { write } for pid=2034 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188630150.837:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa7a080 a2=63a494 a3=0 items=0 ppid=1 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188630151.049:10): avc: denied { read write } for pid=2253 comm="modprobe" name="" dev=sockfs ino=9471 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188630151.049:10): avc: denied { read write } for pid=2253 comm="modprobe" name="" dev=sockfs ino=9481 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188630151.049:10): arch=40000003 syscall=11 success=yes exit=0 a0=885a1d8 a1=bfccfdd8 a2=bfcd3210 a3=885a1d8 items=0 ppid=2213 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188630151.049:10): path="socket:[9481]" >type=AVC_PATH msg=audit(1188630151.049:10): path="socket:[9471]" >type=ANOM_ABEND msg=audit(1188630163.229:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2748 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188630166.156:12): user pid=2882 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188630191.649:13): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188630191.652:14): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188630191.653:15): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188630191.657:16): login pid=2983 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188630191.675:17): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188630191.676:18): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188631934.797:19): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188631934.797:20): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188631934.899:21): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188633661.826:22): user pid=3893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188637261.951:23): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188640591.097:24): user pid=3654 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188640600.771:25): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188640600.771:26): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188640600.783:27): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188640861.077:28): user pid=4464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188644245.763:29): user pid=4438 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188644461.114:30): user pid=4747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188646926.979:31): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188646926.979:32): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188646926.993:33): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188647202.618:34): user pid=4941 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188648061.338:35): user pid=5244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188651480.500:36): user pid=7051 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188659894.184:455): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929 >type=CONFIG_CHANGE msg=audit(1188659894.283:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188659894.283:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188659894.400:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188659894.400:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188659901.524:9): avc: denied { write } for pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188659901.524:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf992fa0 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188659901.868:10): avc: denied { read write } for pid=2263 comm="modprobe" name="" dev=sockfs ino=9439 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188659901.868:10): avc: denied { read write } for pid=2263 comm="modprobe" name="" dev=sockfs ino=9447 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188659901.868:10): arch=40000003 syscall=11 success=yes exit=0 a0=83771d8 a1=bfa9ed08 a2=bfaa2140 a3=83771d8 items=0 ppid=2223 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188659901.868:10): path="socket:[9447]" >type=AVC_PATH msg=audit(1188659901.868:10): path="socket:[9439]" >type=USER_ERR msg=audit(1188659917.125:11): user pid=2891 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188659929.215:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2762 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188659997.460:13): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188659997.463:14): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188659997.464:15): user pid=2998 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188659997.468:16): login pid=2998 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188659997.489:17): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188659997.491:18): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188660518.534:19): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188660518.535:20): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188660518.625:21): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188660518.625:22): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188660792.965:23): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188660792.968:24): user pid=3733 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188661474.306:25): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188661474.306:26): user pid=2998 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188661477.776:27): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2624 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188661483.102:28): avc: denied { read write } for pid=4615 comm="modprobe" name="" dev=sockfs ino=56408 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188661483.102:28): avc: denied { read write } for pid=4615 comm="modprobe" name="" dev=sockfs ino=56409 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188661483.102:28): arch=40000003 syscall=11 success=yes exit=0 a0=98afe08 a1=bfd38a68 a2=bfd3b340 a3=98afe08 items=0 ppid=4614 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188661483.102:28): path="socket:[56409]" >type=AVC_PATH msg=audit(1188661483.102:28): path="socket:[56408]" >type=ANOM_ABEND msg=audit(1188661484.373:29): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2010 comm="named" sig=6 >type=DAEMON_END msg=audit(1188661484.766:456): auditd normal halt, sending auid=4294967295 pid=5055 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1929 >type=DAEMON_START msg=audit(1188677324.570:2323): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1894 res=success, auditd pid=1894 >type=CONFIG_CHANGE msg=audit(1188677324.669:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188677324.669:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188677324.692:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188677324.692:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188677331.376:9): avc: denied { read write } for pid=2225 comm="modprobe" name="" dev=sockfs ino=9477 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188677331.376:9): avc: denied { read write } for pid=2225 comm="modprobe" name="" dev=sockfs ino=9487 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188677331.376:9): arch=40000003 syscall=11 success=yes exit=0 a0=9e7d1d8 a1=bff1e088 a2=bff214c0 a3=9e7d1d8 items=0 ppid=2186 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188677331.376:9): path="socket:[9487]" >type=AVC_PATH msg=audit(1188677331.376:9): path="socket:[9477]" >type=AVC msg=audit(1188677331.598:10): avc: denied { write } for pid=2009 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188677331.598:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc59260 a2=63a494 a3=0 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188677347.161:11): user pid=2856 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188677399.572:12): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188677399.575:13): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188677399.576:14): user pid=2952 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188677399.580:15): login pid=2952 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188677399.590:16): user pid=2952 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188677399.591:17): user pid=2952 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188677563.617:18): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188677563.617:19): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188677563.721:20): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188677708.824:21): user pid=3430 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188680461.545:22): user pid=17064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188681095.293:23): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=29514 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188681105.269:24): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=29516 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188681220.726:25): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=30733 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188681279.053:26): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=30737 comm="mkfile" sig=8 >type=USER_AUTH msg=audit(1188681483.076:27): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188681483.076:28): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188681483.086:29): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188681494.909:30): user pid=30885 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188684061.631:31): user pid=32395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188687283.504:32): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=12475 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188687386.321:33): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15404 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188687403.952:34): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15407 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188687513.853:35): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15413 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188687523.907:36): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=15416 comm="mkfile" sig=8 >type=USER_ACCT msg=audit(1188687661.683:37): user pid=15698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188687866.861:38): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17131 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188688305.967:39): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17194 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688448.830:40): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17379 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688522.967:41): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17436 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688651.154:42): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17509 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688700.221:43): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17582 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688762.811:44): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17685 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688899.970:45): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=17769 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188688955.666:46): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=18847 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188689721.965:47): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19038 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188689954.815:48): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19134 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188690873.036:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19295 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188690977.081:50): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19324 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188691045.817:51): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19337 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188691098.350:52): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19349 comm="mkfile" sig=11 >type=USER_ACCT msg=audit(1188691261.724:53): user pid=19369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188691717.424:54): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19517 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188691825.036:55): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19538 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188691879.108:56): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19551 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188692358.409:57): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=19631 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188692898.940:58): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=20031 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693102.500:59): auid=500 uid=500 gid=500 subj=user_u:system_r:java_t:s0 pid=20178 comm="mkfile" sig=11 >type=ANOM_ABEND msg=audit(1188693609.952:60): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22801 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693646.324:61): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22836 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693650.737:62): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=22842 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693794.563:63): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23014 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693849.026:64): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23022 comm="mkfile" sig=8 >type=ANOM_ABEND msg=audit(1188693874.843:65): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=23066 comm="mkfile" sig=8 >type=USER_ACCT msg=audit(1188694861.771:66): user pid=24728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188697013.650:67): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188697013.650:68): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188697013.664:69): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188697013.664:70): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188697013.674:71): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188697013.674:72): user pid=32099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188697024.969:73): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188697024.969:74): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188697024.981:75): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188697024.981:76): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188697077.244:77): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188697077.244:78): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188697077.290:79): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188697077.290:80): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188697097.337:81): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188697097.337:82): user pid=32171 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188697102.615:83): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188697102.615:84): user pid=32103 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188697211.526:85): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188697211.527:86): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188697211.542:87): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188697211.543:88): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188697224.511:89): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188697224.511:90): user pid=32301 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1188697237.499:91): user pid=32471 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188717809.595:4365): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927 >type=CONFIG_CHANGE msg=audit(1188717809.695:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188717809.695:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188717809.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188717809.897:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188717816.914:9): avc: denied { read write } for pid=2260 comm="modprobe" name="" dev=sockfs ino=9407 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188717816.914:9): avc: denied { read write } for pid=2260 comm="modprobe" name="" dev=sockfs ino=9417 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188717816.914:9): arch=40000003 syscall=11 success=yes exit=0 a0=96621d8 a1=bfce3078 a2=bfce64b0 a3=96621d8 items=0 ppid=2221 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188717816.914:9): path="socket:[9417]" >type=AVC_PATH msg=audit(1188717816.914:9): path="socket:[9407]" >type=AVC msg=audit(1188717817.264:10): avc: denied { write } for pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188717817.264:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf81cdf0 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188717832.623:11): user pid=2891 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188717860.041:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188718246.985:13): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188718246.987:14): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188718246.987:15): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188718246.989:16): login pid=2993 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188718246.998:17): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188718246.999:18): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188720061.946:19): user pid=3515 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188723661.028:20): user pid=3752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188727261.096:21): user pid=3986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188730861.139:22): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188734461.165:23): user pid=4466 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188734771.500:24): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188734771.500:25): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188734771.579:26): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188734771.579:27): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188734826.885:28): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188734826.886:29): user pid=4512 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188735928.905:30): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188735928.905:31): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188735928.941:32): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188736058.212:33): user pid=5971 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188737019.735:34): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188737019.736:35): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188737019.755:36): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188737019.755:37): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188737066.430:38): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188737066.431:39): user pid=6149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188737701.186:40): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188737701.187:41): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188737701.199:42): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188737701.199:43): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188737737.752:44): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188737737.752:45): user pid=6349 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188737765.204:46): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188737765.205:47): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188737765.218:48): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188737765.218:49): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188737778.645:50): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188737778.646:51): user pid=6358 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188738061.287:52): user pid=6561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188738106.499:53): user pid=6696 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188759905.827:6632): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1918 res=success, auditd pid=1918 >type=CONFIG_CHANGE msg=audit(1188759905.928:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188759905.928:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188759905.999:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188759905.999:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188759913.166:9): avc: denied { write } for pid=2033 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188759913.166:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff59560 a2=63a494 a3=0 items=0 ppid=1 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188759913.623:10): avc: denied { read write } for pid=2252 comm="modprobe" name="" dev=sockfs ino=9433 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188759913.623:10): avc: denied { read write } for pid=2252 comm="modprobe" name="" dev=sockfs ino=9441 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188759913.623:10): arch=40000003 syscall=11 success=yes exit=0 a0=9ac91d8 a1=bfb1ef68 a2=bfb223a0 a3=9ac91d8 items=0 ppid=2214 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188759913.623:10): path="socket:[9441]" >type=AVC_PATH msg=audit(1188759913.623:10): path="socket:[9433]" >type=USER_ERR msg=audit(1188759928.391:11): user pid=2881 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188760085.495:12): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188760085.499:13): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188760085.500:14): user pid=2988 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188760085.504:15): login pid=2988 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188760085.524:16): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188760085.525:17): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188763261.535:18): user pid=3714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188763285.850:19): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2763 comm="hald-addon-acpi" sig=11 >type=USER_END msg=audit(1188766243.777:20): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188766243.778:21): user pid=2988 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188766247.025:22): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2614 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188766252.412:23): avc: denied { read write } for pid=4576 comm="modprobe" name="" dev=sockfs ino=151443 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188766252.412:23): avc: denied { read write } for pid=4576 comm="modprobe" name="" dev=sockfs ino=151444 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188766252.412:23): arch=40000003 syscall=11 success=yes exit=0 a0=9f05e08 a1=bfd661c8 a2=bfd68aa0 a3=9f05e08 items=0 ppid=4575 pid=4576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188766252.412:23): path="socket:[151444]" >type=AVC_PATH msg=audit(1188766252.412:23): path="socket:[151443]" >type=ANOM_ABEND msg=audit(1188766253.785:24): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1999 comm="named" sig=6 >type=DAEMON_END msg=audit(1188766254.165:6633): auditd normal halt, sending auid=4294967295 pid=5016 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1918 >type=DAEMON_START msg=audit(1188799326.732:8518): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1922 res=success, auditd pid=1922 >type=CONFIG_CHANGE msg=audit(1188799326.832:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188799326.832:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188799326.865:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188799326.865:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188799333.496:9): avc: denied { read write } for pid=2254 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188799333.496:9): avc: denied { read write } for pid=2254 comm="modprobe" name="" dev=sockfs ino=9458 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188799333.496:9): arch=40000003 syscall=11 success=yes exit=0 a0=897d1d8 a1=bf8bd228 a2=bf8c0660 a3=897d1d8 items=0 ppid=2215 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188799333.496:9): path="socket:[9458]" >type=AVC_PATH msg=audit(1188799333.496:9): path="socket:[9448]" >type=AVC msg=audit(1188799333.785:10): avc: denied { write } for pid=2037 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188799333.785:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8eff00 a2=63a494 a3=0 items=0 ppid=1 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188799349.101:11): user pid=2884 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188799354.280:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2767 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188799363.688:13): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188799363.692:14): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188799363.693:15): user pid=2992 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188799363.697:16): login pid=2992 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188799363.717:17): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188799363.719:18): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1188800450.724:19): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188800450.724:20): user pid=2992 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188800453.940:21): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2618 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188800459.464:22): avc: denied { read write } for pid=4447 comm="modprobe" name="" dev=sockfs ino=46399 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188800459.464:22): avc: denied { read write } for pid=4447 comm="modprobe" name="" dev=sockfs ino=46400 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188800459.464:22): arch=40000003 syscall=11 success=yes exit=0 a0=a021e08 a1=bfd832b8 a2=bfd85b90 a3=a021e08 items=0 ppid=4446 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188800459.464:22): path="socket:[46400]" >type=AVC_PATH msg=audit(1188800459.464:22): path="socket:[46399]" >type=ANOM_ABEND msg=audit(1188800460.735:23): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2003 comm="named" sig=6 >type=DAEMON_END msg=audit(1188800461.129:8519): auditd normal halt, sending auid=4294967295 pid=4887 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1922 >type=DAEMON_START msg=audit(1188804689.940:7433): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1896 res=success, auditd pid=1896 >type=CONFIG_CHANGE msg=audit(1188804690.040:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188804690.040:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188804690.304:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188804690.304:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188804697.798:9): avc: denied { write } for pid=2011 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188804697.798:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf84d660 a2=63a494 a3=0 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188804698.023:10): avc: denied { read write } for pid=2232 comm="modprobe" name="" dev=sockfs ino=9438 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188804698.023:10): avc: denied { read write } for pid=2232 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188804698.023:10): arch=40000003 syscall=11 success=yes exit=0 a0=8ecc1d8 a1=bfdf3208 a2=bfdf6640 a3=8ecc1d8 items=0 ppid=2192 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188804698.023:10): path="socket:[9448]" >type=AVC_PATH msg=audit(1188804698.023:10): path="socket:[9438]" >type=USER_ERR msg=audit(1188804714.070:11): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188804715.002:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2747 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188804729.222:13): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188804729.223:14): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188804729.228:15): login pid=2854 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188804729.324:16): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188804729.331:17): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188804729.331:18): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188804729.341:19): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1188804738.012:20): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188804738.016:21): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188804738.017:22): user pid=2972 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188804738.021:23): login pid=2972 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188804738.041:24): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188804738.043:25): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188804791.059:26): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188804791.059:27): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188804791.146:28): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188804791.146:29): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188804919.611:30): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188804919.613:31): user pid=3414 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188805374.250:32): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188805374.250:33): user pid=2972 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188805376.028:34): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1188805376.031:35): user pid=2854 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1188805377.488:36): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2594 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188805383.107:37): avc: denied { read write } for pid=4709 comm="modprobe" name="" dev=sockfs ino=30527 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188805383.107:37): avc: denied { read write } for pid=4709 comm="modprobe" name="" dev=sockfs ino=30528 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188805383.107:37): arch=40000003 syscall=11 success=yes exit=0 a0=8628e08 a1=bfca5918 a2=bfca81f0 a3=8628e08 items=0 ppid=4708 pid=4709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188805383.107:37): path="socket:[30528]" >type=AVC_PATH msg=audit(1188805383.107:37): path="socket:[30527]" >type=ANOM_ABEND msg=audit(1188805384.457:38): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1977 comm="named" sig=6 >type=DAEMON_END msg=audit(1188805384.855:7434): auditd normal halt, sending auid=4294967295 pid=5149 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1896 >type=DAEMON_START msg=audit(1188808284.388:7402): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897 >type=CONFIG_CHANGE msg=audit(1188808284.487:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188808284.487:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188808284.707:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188808284.707:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188808291.700:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9374 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188808291.700:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9384 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188808291.700:9): arch=40000003 syscall=11 success=yes exit=0 a0=8d8b1d8 a1=bfa102f8 a2=bfa13730 a3=8d8b1d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188808291.700:9): path="socket:[9384]" >type=AVC_PATH msg=audit(1188808291.700:9): path="socket:[9374]" >type=AVC msg=audit(1188808292.072:10): avc: denied { write } for pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188808292.072:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa2a830 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188808307.210:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188808320.472:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2726 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188808322.203:13): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188808322.205:14): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188808322.205:15): user pid=2937 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188808322.207:16): login pid=2937 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188808322.215:17): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188808322.215:18): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188808794.346:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3574 comm="totem-video-thu" sig=11 >type=ANOM_ABEND msg=audit(1188808877.779:20): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3584 comm="totem-video-thu" sig=11 >type=ANOM_ABEND msg=audit(1188808911.757:21): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3592 comm="ffmpeg2theora" sig=11 >type=ANOM_ABEND msg=audit(1188808919.155:22): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3595 comm="ffplay" sig=11 >type=USER_ACCT msg=audit(1188810061.734:23): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188810061.951:24): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188810061.952:25): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188810062.007:26): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188810062.007:27): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188810062.022:28): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188810062.023:29): user pid=4095 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1188810136.476:30): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4130 comm="ffmpeg" sig=11 >type=USER_AUTH msg=audit(1188811003.819:31): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188811003.819:32): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188811003.849:33): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1188811802.641:34): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4391 comm="ffmpeg" sig=11 >type=USER_AUTH msg=audit(1188812271.847:35): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188812271.848:36): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188812271.866:37): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188812271.866:38): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188812294.730:39): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188812294.731:40): user pid=4481 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188812546.056:41): user pid=4577 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1188812548.595:42): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188812548.595:43): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188812548.626:44): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188812548.626:45): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1188812591.665:46): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188812591.665:47): user pid=4578 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_ABEND msg=audit(1188813139.774:48): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4803 comm="ffplay" sig=11 >type=ANOM_ABEND msg=audit(1188813161.737:49): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=4806 comm="ffplay" sig=11 >type=USER_AUTH msg=audit(1188813568.411:50): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188813568.411:51): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188813568.634:52): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188813568.705:53): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188813651.976:54): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188813651.976:55): user pid=4963 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188813661.987:56): user pid=5006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188814709.645:57): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188814709.646:58): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188814709.752:59): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188814735.641:60): user pid=5195 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188814758.165:61): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188814758.165:62): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188814758.183:63): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188814758.212:64): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1188814766.319:65): avc: denied { write } for pid=5257 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188814766.319:65): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf815e10 a2=63a494 a3=0 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=CRED_DISP msg=audit(1188814770.761:66): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188814770.771:67): user pid=5209 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188814811.820:68): user pid=4242 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1188815131.292:69): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5339 comm="ffplay" sig=11 >type=USER_AUTH msg=audit(1188815896.998:70): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188815899.878:71): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188815899.878:72): user pid=5437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188816150.641:73): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188816150.641:74): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188816150.660:75): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188816150.660:76): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188816371.290:77): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188816371.290:78): user pid=5462 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1188816393.360:79): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5558 comm="ffplay" sig=11 >type=ANOM_ABEND msg=audit(1188817094.835:80): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=5662 comm="ffplay" sig=11 >type=USER_ACCT msg=audit(1188817261.354:81): user pid=5681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188820861.437:82): user pid=6109 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188822009.195:83): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188822009.196:84): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188822009.209:85): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188822087.114:86): user pid=6324 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188822099.242:87): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188822099.242:88): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188822099.258:89): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188822099.258:90): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188822207.776:91): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188822207.777:92): user pid=6338 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1188823133.813:93): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188823133.814:94): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188823133.822:95): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188823133.822:96): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188823161.976:97): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188823161.977:98): user pid=19253 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188823398.681:99): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188823398.682:100): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188823398.695:101): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188823445.776:102): user pid=19329 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188823482.737:103): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188823482.738:104): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188823482.751:105): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188823482.751:106): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188823522.210:107): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188823522.210:108): user pid=19348 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188824185.149:109): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188824185.149:110): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188824185.161:111): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188824185.162:112): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188824249.968:113): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188824249.969:114): user pid=2037 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188824412.375:115): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188824412.375:116): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188824412.399:117): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188824461.475:118): user pid=2110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188824470.238:119): user pid=2099 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188824539.990:120): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188824539.990:121): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188824540.090:122): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188824540.091:123): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188824541.361:124): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188824541.362:125): user pid=2140 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188824632.977:126): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188824632.977:127): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188824632.984:128): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188824632.984:129): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188824636.565:130): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188824636.566:131): user pid=15159 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188825642.475:132): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188825642.475:133): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188825642.519:134): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188825642.519:135): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188825642.668:136): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188825642.668:137): user pid=15239 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188826391.841:138): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188826391.841:139): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188826391.856:140): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188826391.857:141): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1188827228.832:142): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188827228.846:143): user pid=15360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188827382.767:144): user pid=19877 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188827382.768:145): user pid=19877 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188828046.283:146): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828046.284:147): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188828046.369:148): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188828046.369:149): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828061.674:150): user pid=19982 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1188828146.972:151): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188828146.972:152): user pid=19947 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188828160.228:153): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828160.228:154): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188828160.241:155): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188828160.241:156): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188828221.569:157): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188828221.570:158): user pid=20060 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188828229.301:159): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828229.301:160): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188828229.319:161): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188828229.319:162): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1188828235.275:163): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188828235.275:164): user pid=20096 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=matej : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188828239.102:165): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828239.102:166): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188828239.119:167): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188828239.119:168): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188828282.298:169): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188828282.298:170): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188828282.368:171): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188828291.776:172): user pid=20232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1188828293.462:173): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188828293.462:174): user pid=20132 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188830939.518:175): user pid=20435 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188830942.253:176): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188830942.254:177): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188830942.272:178): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188830942.272:179): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188831327.052:180): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188831327.054:181): user pid=20436 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188831332.972:182): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188831332.972:183): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188831332.986:184): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188831661.832:185): user pid=20517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188832602.134:186): user pid=20497 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188833679.714:187): user pid=24650 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188833684.240:188): user pid=24651 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188833687.074:189): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188833687.075:190): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188833687.150:191): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188833687.157:192): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188833867.814:193): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188833867.814:194): user pid=24652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188835261.112:195): user pid=25098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188837062.287:196): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188837062.288:197): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188837062.306:198): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188837062.307:199): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1188837120.365:200): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188837120.365:201): user pid=25490 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188837778.013:202): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188837778.014:203): user pid=2937 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188837782.798:204): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2577 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188837791.202:205): avc: denied { read write } for pid=26274 comm="modprobe" name="" dev=sockfs ino=815597 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188837791.202:205): avc: denied { read write } for pid=26274 comm="modprobe" name="" dev=sockfs ino=815598 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188837791.202:205): arch=40000003 syscall=11 success=yes exit=0 a0=8722e08 a1=bfebabe8 a2=bfebd4c0 a3=8722e08 items=0 ppid=26273 pid=26274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188837791.202:205): path="socket:[815598]" >type=AVC_PATH msg=audit(1188837791.202:205): path="socket:[815597]" >type=ANOM_ABEND msg=audit(1188837794.303:206): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1978 comm="named" sig=6 >type=DAEMON_END msg=audit(1188837797.814:7403): auditd normal halt, sending auid=4294967295 pid=26719 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1897 >type=DAEMON_START msg=audit(1188838825.725:9667): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1981 res=success, auditd pid=1981 >type=CONFIG_CHANGE msg=audit(1188838825.825:53): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188838825.825:54): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188838825.847:55): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188838825.847:56): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188838832.552:57): avc: denied { write } for pid=2136 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188838832.552:57): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc72c20 a2=63a494 a3=0 items=0 ppid=1 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188838832.707:58): avc: denied { read write } for pid=2384 comm="modprobe" name="" dev=sockfs ino=19074 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188838832.707:58): avc: denied { read write } for pid=2384 comm="modprobe" name="" dev=sockfs ino=19084 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188838832.707:58): arch=40000003 syscall=11 success=yes exit=0 a0=81d61d8 a1=bfaa8708 a2=bfaabb40 a3=81d61d8 items=0 ppid=2343 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188838832.707:58): path="socket:[19084]" >type=AVC_PATH msg=audit(1188838832.707:58): path="socket:[19074]" >type=USER_AUTH msg=audit(1188838847.087:59): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1188838847.087:60): user pid=3050 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1188838847.090:61): login pid=3050 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188838847.165:62): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1188838847.169:63): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1188838847.182:64): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1188838847.183:65): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1188838847.394:66): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2991 comm="hald-addon-acpi" sig=11 >type=USER_ACCT msg=audit(1188838861.560:67): user pid=3145 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188839503.910:68): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1188839503.950:69): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1188839506.107:70): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188839506.107:71): user pid=3051 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188839506.109:72): login pid=3051 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1188839506.173:73): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188839506.175:74): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188839506.176:75): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188839506.176:76): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188840534.373:77): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188840534.375:78): user pid=3051 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1188840537.962:79): user pid=4309 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1188840537.963:80): user pid=4309 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1188840537.965:81): login pid=4309 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1188840538.052:82): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1188840538.054:83): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1188840538.055:84): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1188840538.055:85): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1188840541.148:86): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1188840541.152:87): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188840541.163:88): user pid=4309 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1188840541.165:89): user pid=3050 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1188840542.603:90): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2829 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188840547.751:91): avc: denied { read write } for pid=4700 comm="modprobe" name="" dev=sockfs ino=24949 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188840547.751:91): avc: denied { read write } for pid=4700 comm="modprobe" name="" dev=sockfs ino=24950 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188840547.751:91): arch=40000003 syscall=11 success=yes exit=0 a0=8067e08 a1=bf807d38 a2=bf80a610 a3=8067e08 items=0 ppid=4699 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188840547.751:91): path="socket:[24950]" >type=AVC_PATH msg=audit(1188840547.751:91): path="socket:[24949]" >type=ANOM_ABEND msg=audit(1188840549.025:92): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2086 comm="named" sig=6 >type=DAEMON_END msg=audit(1188840549.391:9668): auditd normal halt, sending auid=4294967295 pid=5101 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1981 >type=DAEMON_START msg=audit(1188842524.132:2820): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888 >type=CONFIG_CHANGE msg=audit(1188842524.232:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188842524.232:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188842524.485:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188842524.485:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188842531.429:9): avc: denied { read write } for pid=2204 comm="modprobe" name="" dev=sockfs ino=9230 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188842531.429:9): avc: denied { read write } for pid=2204 comm="modprobe" name="" dev=sockfs ino=9248 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188842531.429:9): arch=40000003 syscall=11 success=yes exit=0 a0=8be71d8 a1=bff82a68 a2=bff85ea0 a3=8be71d8 items=0 ppid=2164 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188842531.429:9): path="socket:[9248]" >type=AVC_PATH msg=audit(1188842531.429:9): path="socket:[9230]" >type=AVC msg=audit(1188842532.063:10): avc: denied { write } for pid=2003 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188842532.063:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb6c980 a2=63a494 a3=0 items=0 ppid=1 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188842547.477:11): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188842710.431:12): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188842710.434:13): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188842710.435:14): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188842710.440:15): login pid=2930 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188842710.460:16): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188842710.462:17): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188846061.684:18): user pid=3576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188849661.766:19): user pid=3764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188853261.812:20): user pid=3936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188856861.859:21): user pid=4123 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188857504.123:22): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188857504.123:23): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188857504.218:24): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188857504.219:25): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188857505.484:26): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188857505.484:27): user pid=4340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188857512.880:28): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188857515.292:29): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188857515.292:30): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188857515.320:31): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188857515.322:32): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188857515.322:33): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188857515.330:34): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188857515.330:35): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188857515.344:36): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188857515.345:37): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188858547.022:38): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188858547.025:39): user pid=4375 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188858973.557:40): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188858973.558:41): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188858973.592:42): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188858973.594:43): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188858973.594:44): user pid=4726 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188860461.961:45): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188860628.463:46): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188860628.464:47): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188860628.465:48): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188860628.466:49): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188860628.466:50): user pid=5044 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188860633.313:51): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188860633.313:52): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188860633.313:53): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188860633.373:54): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188860633.373:55): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188860633.389:56): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188860633.389:57): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188860669.086:58): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188860669.086:59): user pid=5045 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188860731.162:60): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188860731.162:61): user pid=2930 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188860735.131:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2568 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188860742.183:63): avc: denied { read write } for pid=5634 comm="modprobe" name="" dev=sockfs ino=483203 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188860742.183:63): avc: denied { read write } for pid=5634 comm="modprobe" name="" dev=sockfs ino=483204 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188860742.183:63): arch=40000003 syscall=11 success=yes exit=0 a0=9a83e08 a1=bfc1a8a8 a2=bfc1d180 a3=9a83e08 items=0 ppid=5633 pid=5634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188860742.183:63): path="socket:[483204]" >type=AVC_PATH msg=audit(1188860742.183:63): path="socket:[483203]" >type=ANOM_ABEND msg=audit(1188860744.339:64): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1969 comm="named" sig=6 >type=DAEMON_END msg=audit(1188860746.802:2821): auditd normal halt, sending auid=4294967295 pid=6077 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888 >type=DAEMON_START msg=audit(1188885871.705:5793): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1898 res=success, auditd pid=1898 >type=CONFIG_CHANGE msg=audit(1188885871.805:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188885871.805:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188885872.147:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188885872.147:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188885879.391:9): avc: denied { read write } for pid=2216 comm="modprobe" name="" dev=sockfs ino=9505 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188885879.391:9): avc: denied { read write } for pid=2216 comm="modprobe" name="" dev=sockfs ino=9517 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188885879.391:9): arch=40000003 syscall=11 success=yes exit=0 a0=9a031d8 a1=bfbda938 a2=bfbddd70 a3=9a031d8 items=0 ppid=2175 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188885879.391:9): path="socket:[9517]" >type=AVC_PATH msg=audit(1188885879.391:9): path="socket:[9505]" >type=AVC msg=audit(1188885879.397:10): avc: denied { write } for pid=2013 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188885879.397:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8f3700 a2=63a494 a3=0 items=0 ppid=1 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188885894.876:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188885943.506:12): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188885944.510:13): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188885944.511:14): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188885944.515:15): login pid=2947 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188885944.536:16): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188885944.537:17): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1188888234.595:18): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188888234.596:19): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188888237.922:20): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2578 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188888243.377:21): avc: denied { read write } for pid=3894 comm="modprobe" name="" dev=sockfs ino=66322 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188888243.377:21): avc: denied { read write } for pid=3894 comm="modprobe" name="" dev=sockfs ino=66323 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188888243.377:21): arch=40000003 syscall=11 success=yes exit=0 a0=91dbe08 a1=bfb2d868 a2=bfb30140 a3=91dbe08 items=0 ppid=3893 pid=3894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188888243.377:21): path="socket:[66323]" >type=AVC_PATH msg=audit(1188888243.377:21): path="socket:[66322]" >type=ANOM_ABEND msg=audit(1188888244.711:22): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1979 comm="named" sig=6 >type=DAEMON_END msg=audit(1188888245.099:5794): auditd normal halt, sending auid=4294967295 pid=4334 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1898 >type=DAEMON_START msg=audit(1188889066.144:4972): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1898 res=success, auditd pid=1898 >type=CONFIG_CHANGE msg=audit(1188889066.243:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188889066.243:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188889066.626:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188889066.626:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188889073.492:9): avc: denied { read write } for pid=2214 comm="modprobe" name="" dev=sockfs ino=9541 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188889073.492:9): avc: denied { read write } for pid=2214 comm="modprobe" name="" dev=sockfs ino=9551 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188889073.492:9): arch=40000003 syscall=11 success=yes exit=0 a0=91951d8 a1=bfe0e338 a2=bfe11770 a3=91951d8 items=0 ppid=2176 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188889073.492:9): path="socket:[9551]" >type=AVC_PATH msg=audit(1188889073.492:9): path="socket:[9541]" >type=AVC msg=audit(1188889073.964:10): avc: denied { write } for pid=2013 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188889073.964:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfcb7ac0 a2=63a494 a3=0 items=0 ppid=1 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188889089.432:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188889103.672:12): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188889103.675:13): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188889103.675:14): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188889103.677:15): login pid=2940 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188889103.724:16): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188889103.726:17): user pid=2940 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188889141.112:18): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188889141.113:19): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188889141.197:20): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188889187.341:21): user pid=3268 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188889199.019:22): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188889199.019:23): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188889199.020:24): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188889199.022:25): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188889199.022:26): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188889199.061:27): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188889199.062:28): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188889199.097:29): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188889199.097:30): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CHAUTHTOK msg=audit(1188889238.652:31): user pid=3402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='op=adding group acct=fuse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1188889240.423:32): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188889240.424:33): user pid=3320 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188889261.961:34): user pid=3410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188890367.499:35): user pid=3869 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188890960.288:8510): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1930 res=success, auditd pid=1930 >type=CONFIG_CHANGE msg=audit(1188890960.389:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188890960.389:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188890960.636:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188890960.636:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188890967.234:9): avc: denied { read write } for pid=2246 comm="modprobe" name="" dev=sockfs ino=9442 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188890967.234:9): avc: denied { read write } for pid=2246 comm="modprobe" name="" dev=sockfs ino=9456 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188890967.234:9): arch=40000003 syscall=11 success=yes exit=0 a0=9d7d1d8 a1=bfed9948 a2=bfedcd80 a3=9d7d1d8 items=0 ppid=2207 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188890967.234:9): path="socket:[9456]" >type=AVC_PATH msg=audit(1188890967.234:9): path="socket:[9442]" >type=AVC msg=audit(1188890967.406:10): avc: denied { write } for pid=2045 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188890967.406:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa6f080 a2=63a494 a3=0 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188890981.843:11): user pid=2878 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188890995.461:12): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188890995.465:13): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188890995.465:14): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188890995.470:15): login pid=2969 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188890995.491:16): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188890995.493:17): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1188891095.994:18): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188891098.547:19): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188891098.547:20): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188891098.616:21): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188891177.465:22): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188891177.466:23): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188891177.504:24): user pid=3417 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188891227.991:25): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188891227.991:26): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188891227.992:27): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188891227.997:28): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188891227.997:29): user pid=3426 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188891231.197:30): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188891231.197:31): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188891231.238:32): user pid=3458 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188891322.416:33): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188891322.416:34): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188891322.421:35): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188891342.186:36): user pid=3379 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188891345.854:37): user pid=3529 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188891609.130:38): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188891609.130:39): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1188891609.132:40): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1188891609.138:41): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1188891609.138:42): user pid=3618 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188892861.117:43): user pid=3702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1188892940.487:44): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1188892949.845:45): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1188892949.846:46): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1188892949.968:47): user pid=3715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=LOGIN msg=audit(1188892949.969:48): login pid=3715 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1188892949.970:49): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1188892949.990:50): user pid=3717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=/dev/pts/2 res=success)' >type=CRED_REFR msg=audit(1188892949.991:51): user pid=3717 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1188892970.595:52): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_END msg=audit(1188892970.595:53): user pid=3715 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1188895856.405:54): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1188895858.945:55): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188895858.945:56): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188895858.945:57): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188895858.948:58): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188895858.948:59): user pid=8353 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188895882.489:60): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188895882.489:61): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188895882.490:62): user pid=8355 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188895885.940:63): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188895885.940:64): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188895885.941:65): user pid=8356 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188895910.479:66): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188895910.486:67): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188895910.486:68): user pid=8359 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188896461.194:69): user pid=8554 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188896731.633:70): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188896731.633:71): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188896731.634:72): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188896731.641:73): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188896731.641:74): user pid=8650 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188896748.594:75): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188896748.594:75): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfddb988 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1188897475.472:76): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188897475.472:77): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188897475.506:78): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188897475.535:79): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188897475.536:80): user pid=8830 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188897503.423:81): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188897503.423:82): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188897503.571:83): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188897692.937:84): user pid=8864 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188897970.590:85): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188897970.590:86): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188897970.693:87): user pid=8940 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188898043.794:88): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1188898086.176:89): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188898086.176:90): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188898086.290:91): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188898097.132:92): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1188898097.132:92): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfddb998 a3=6 items=0 ppid=1 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1188900061.365:93): user pid=9315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188900760.134:94): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1188900760.135:95): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1188900760.193:96): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1188900760.215:97): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1188900760.215:98): user pid=9402 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1188901045.216:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1188901062.131:100): user pid=8974 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1188901771.530:101): avc: denied { execmod } for pid=9647 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188901771.530:101): arch=40000003 syscall=125 success=no exit=-13 a0=3e31000 a1=48000 a2=5 a3=bfa28070 items=0 ppid=3134 pid=9647 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188901771.530:101): path="/usr/lib/libtheora.so.0.2.0" >type=USER_ACCT msg=audit(1188903661.915:102): user pid=9754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1188904975.737:103): avc: denied { execmod } for pid=9938 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188904975.737:103): arch=40000003 syscall=125 success=no exit=-13 a0=5de8000 a1=48000 a2=5 a3=bf909b50 items=0 ppid=3134 pid=9938 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188904975.737:103): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.160:104): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.160:104): arch=40000003 syscall=125 success=no exit=-13 a0=785b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.160:104): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.168:105): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.168:105): arch=40000003 syscall=125 success=no exit=-13 a0=7fef000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.168:105): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.177:106): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.177:106): arch=40000003 syscall=125 success=no exit=-13 a0=640c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.177:106): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.191:107): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.191:107): arch=40000003 syscall=125 success=no exit=-13 a0=27ba000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.191:107): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.201:108): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.201:108): arch=40000003 syscall=125 success=no exit=-13 a0=1b0c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.201:108): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.210:109): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.210:109): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.210:109): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.218:110): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.218:110): arch=40000003 syscall=125 success=no exit=-13 a0=3eac000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.218:110): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.226:111): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.226:111): arch=40000003 syscall=125 success=no exit=-13 a0=650b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.226:111): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.234:112): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.234:112): arch=40000003 syscall=125 success=no exit=-13 a0=2803000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.234:112): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.242:113): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.242:113): arch=40000003 syscall=125 success=no exit=-13 a0=7519000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.242:113): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.251:114): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.251:114): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.251:114): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.259:115): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.259:115): arch=40000003 syscall=125 success=no exit=-13 a0=775f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.259:115): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.267:116): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.267:116): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.267:116): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.275:117): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.275:117): arch=40000003 syscall=125 success=no exit=-13 a0=334f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.275:117): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.283:118): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.283:118): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.283:118): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.291:119): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.291:119): arch=40000003 syscall=125 success=no exit=-13 a0=3f9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.291:119): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.299:120): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.299:120): arch=40000003 syscall=125 success=no exit=-13 a0=40bc000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.299:120): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.307:121): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.307:121): arch=40000003 syscall=125 success=no exit=-13 a0=1ec4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.307:121): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.315:122): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.315:122): arch=40000003 syscall=125 success=no exit=-13 a0=1b68000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.315:122): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.323:123): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.323:123): arch=40000003 syscall=125 success=no exit=-13 a0=5f93000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.323:123): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.331:124): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.331:124): arch=40000003 syscall=125 success=no exit=-13 a0=1ec4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.331:124): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.339:125): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.339:125): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.339:125): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.347:126): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.347:126): arch=40000003 syscall=125 success=no exit=-13 a0=1f12000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.347:126): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.355:127): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.355:127): arch=40000003 syscall=125 success=no exit=-13 a0=5ee0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.355:127): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.364:128): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.364:128): arch=40000003 syscall=125 success=no exit=-13 a0=2a59000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.364:128): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.371:129): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.371:129): arch=40000003 syscall=125 success=no exit=-13 a0=1b5e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.371:129): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.379:130): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.379:130): arch=40000003 syscall=125 success=no exit=-13 a0=2b7a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.379:130): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.387:131): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.387:131): arch=40000003 syscall=125 success=no exit=-13 a0=60f3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.387:131): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.414:132): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.414:132): arch=40000003 syscall=125 success=no exit=-13 a0=1f39000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.414:132): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.425:133): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.425:133): arch=40000003 syscall=125 success=no exit=-13 a0=2506000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.425:133): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.435:134): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.435:134): arch=40000003 syscall=125 success=no exit=-13 a0=1b29000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.435:134): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.444:135): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.444:135): arch=40000003 syscall=125 success=no exit=-13 a0=1ff7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.444:135): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.452:136): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.452:136): arch=40000003 syscall=125 success=no exit=-13 a0=5ce0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.452:136): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.460:137): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.460:137): arch=40000003 syscall=125 success=no exit=-13 a0=3237000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.460:137): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.468:138): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.468:138): arch=40000003 syscall=125 success=no exit=-13 a0=40c3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.468:138): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.476:139): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.476:139): arch=40000003 syscall=125 success=no exit=-13 a0=22ea000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.476:139): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.484:140): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.484:140): arch=40000003 syscall=125 success=no exit=-13 a0=1fa3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.484:140): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.492:141): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.492:141): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.492:141): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.505:142): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.505:142): arch=40000003 syscall=125 success=no exit=-13 a0=6fed000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.505:142): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.527:143): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.527:143): arch=40000003 syscall=125 success=no exit=-13 a0=7044000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.527:143): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.541:144): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.541:144): arch=40000003 syscall=125 success=no exit=-13 a0=615d000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.541:144): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.549:145): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.549:145): arch=40000003 syscall=125 success=no exit=-13 a0=282b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.549:145): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.557:146): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.557:146): arch=40000003 syscall=125 success=no exit=-13 a0=44f8000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.557:146): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.566:147): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.566:147): arch=40000003 syscall=125 success=no exit=-13 a0=203c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.566:147): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.575:148): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.575:148): arch=40000003 syscall=125 success=no exit=-13 a0=5c65000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.575:148): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.591:149): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.591:149): arch=40000003 syscall=125 success=no exit=-13 a0=1b5e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.591:149): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905130.613:150): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905130.613:150): arch=40000003 syscall=125 success=no exit=-13 a0=1b58000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905130.613:150): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.681:151): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.681:151): arch=40000003 syscall=125 success=no exit=-13 a0=6dc7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.681:151): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.697:152): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.697:152): arch=40000003 syscall=125 success=no exit=-13 a0=7766000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.697:152): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.705:153): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.705:153): arch=40000003 syscall=125 success=no exit=-13 a0=2897000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.705:153): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.713:154): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.713:154): arch=40000003 syscall=125 success=no exit=-13 a0=1f5c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.713:154): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.721:155): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.721:155): arch=40000003 syscall=125 success=no exit=-13 a0=1f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.721:155): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.729:156): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.729:156): arch=40000003 syscall=125 success=no exit=-13 a0=72fe000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.729:156): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.737:157): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.737:157): arch=40000003 syscall=125 success=no exit=-13 a0=6504000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.737:157): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.745:158): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.745:158): arch=40000003 syscall=125 success=no exit=-13 a0=1b6f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.745:158): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.753:159): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.753:159): arch=40000003 syscall=125 success=no exit=-13 a0=23ec000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.753:159): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.762:160): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.762:160): arch=40000003 syscall=125 success=no exit=-13 a0=4872000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.762:160): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.770:161): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.770:161): arch=40000003 syscall=125 success=no exit=-13 a0=241e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.770:161): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.778:162): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.778:162): arch=40000003 syscall=125 success=no exit=-13 a0=7899000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.778:162): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.786:163): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.786:163): arch=40000003 syscall=125 success=no exit=-13 a0=21ad000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.786:163): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.794:164): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.794:164): arch=40000003 syscall=125 success=no exit=-13 a0=1f87000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.794:164): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.802:165): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.802:165): arch=40000003 syscall=125 success=no exit=-13 a0=298e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.802:165): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.810:166): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.810:166): arch=40000003 syscall=125 success=no exit=-13 a0=1ab4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.810:166): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.818:167): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.818:167): arch=40000003 syscall=125 success=no exit=-13 a0=218f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.818:167): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.826:168): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.826:168): arch=40000003 syscall=125 success=no exit=-13 a0=6698000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.826:168): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.834:169): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.834:169): arch=40000003 syscall=125 success=no exit=-13 a0=1fe0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.834:169): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.842:170): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.842:170): arch=40000003 syscall=125 success=no exit=-13 a0=659f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.842:170): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.850:171): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.850:171): arch=40000003 syscall=125 success=no exit=-13 a0=75bf000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.850:171): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.859:172): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.859:172): arch=40000003 syscall=125 success=no exit=-13 a0=2a3a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.859:172): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.867:173): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.867:173): arch=40000003 syscall=125 success=no exit=-13 a0=40bd000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.867:173): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.875:174): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.875:174): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.875:174): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.883:175): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.883:175): arch=40000003 syscall=125 success=no exit=-13 a0=2410000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.883:175): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.891:176): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.891:176): arch=40000003 syscall=125 success=no exit=-13 a0=2de4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.891:176): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.899:177): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.899:177): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.899:177): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.907:178): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.907:178): arch=40000003 syscall=125 success=no exit=-13 a0=415e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.907:178): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.915:179): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.915:179): arch=40000003 syscall=125 success=no exit=-13 a0=4869000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.915:179): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.923:180): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.923:180): arch=40000003 syscall=125 success=no exit=-13 a0=201b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.923:180): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.931:181): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.931:181): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.931:181): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.940:182): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.940:182): arch=40000003 syscall=125 success=no exit=-13 a0=1b08000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.940:182): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.948:183): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.948:183): arch=40000003 syscall=125 success=no exit=-13 a0=3e9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.948:183): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.956:184): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.956:184): arch=40000003 syscall=125 success=no exit=-13 a0=69c0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.956:184): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.964:185): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.964:185): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.964:185): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.972:186): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.972:186): arch=40000003 syscall=125 success=no exit=-13 a0=1ab4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.972:186): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.980:187): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.980:187): arch=40000003 syscall=125 success=no exit=-13 a0=7a9c000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.980:187): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.988:188): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.988:188): arch=40000003 syscall=125 success=no exit=-13 a0=217f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.988:188): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905135.996:189): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905135.996:189): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905135.996:189): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.004:190): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.004:190): arch=40000003 syscall=125 success=no exit=-13 a0=45f9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.004:190): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.012:191): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.012:191): arch=40000003 syscall=125 success=no exit=-13 a0=1bc4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.012:191): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.021:192): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.021:192): arch=40000003 syscall=125 success=no exit=-13 a0=7551000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.021:192): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.028:193): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.028:193): arch=40000003 syscall=125 success=no exit=-13 a0=1b2f000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.028:193): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.036:194): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.036:194): arch=40000003 syscall=125 success=no exit=-13 a0=76db000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.036:194): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.045:195): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.045:195): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.045:195): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.052:196): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.052:196): arch=40000003 syscall=125 success=no exit=-13 a0=7325000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.052:196): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.061:197): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.061:197): arch=40000003 syscall=125 success=no exit=-13 a0=6bd8000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.061:197): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.198:198): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.198:198): arch=40000003 syscall=125 success=no exit=-13 a0=1f6e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.198:198): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.206:199): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.206:199): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.206:199): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.214:200): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.214:200): arch=40000003 syscall=125 success=no exit=-13 a0=1d91000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.214:200): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.222:201): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.222:201): arch=40000003 syscall=125 success=no exit=-13 a0=5da9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.222:201): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.230:202): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.230:202): arch=40000003 syscall=125 success=no exit=-13 a0=4331000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.230:202): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.238:203): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.238:203): arch=40000003 syscall=125 success=no exit=-13 a0=1f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.238:203): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.246:204): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.246:204): arch=40000003 syscall=125 success=no exit=-13 a0=4ee4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.246:204): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.254:205): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.254:205): arch=40000003 syscall=125 success=no exit=-13 a0=2ceb000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.254:205): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.262:206): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.262:206): arch=40000003 syscall=125 success=no exit=-13 a0=31a6000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.262:206): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.270:207): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.270:207): arch=40000003 syscall=125 success=no exit=-13 a0=1b88000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.270:207): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.278:208): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.278:208): arch=40000003 syscall=125 success=no exit=-13 a0=7fa9000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.278:208): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.286:209): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.286:209): arch=40000003 syscall=125 success=no exit=-13 a0=2c5b000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.286:209): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.294:210): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.294:210): arch=40000003 syscall=125 success=no exit=-13 a0=7188000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.294:210): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.302:211): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.302:211): arch=40000003 syscall=125 success=no exit=-13 a0=1ad7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.302:211): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.310:212): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.310:212): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.310:212): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.318:213): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.318:213): arch=40000003 syscall=125 success=no exit=-13 a0=1fa3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.318:213): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.326:214): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.326:214): arch=40000003 syscall=125 success=no exit=-13 a0=2695000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.326:214): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.334:215): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.334:215): arch=40000003 syscall=125 success=no exit=-13 a0=203e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.334:215): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.343:216): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.343:216): arch=40000003 syscall=125 success=no exit=-13 a0=1f6e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.343:216): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.351:217): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.351:217): arch=40000003 syscall=125 success=no exit=-13 a0=2f03000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.351:217): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.359:218): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.359:218): arch=40000003 syscall=125 success=no exit=-13 a0=1b93000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.359:218): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.367:219): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.367:219): arch=40000003 syscall=125 success=no exit=-13 a0=1ad0000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.367:219): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.375:220): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.375:220): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.375:220): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.383:221): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.383:221): arch=40000003 syscall=125 success=no exit=-13 a0=1b29000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.383:221): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.391:222): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.391:222): arch=40000003 syscall=125 success=no exit=-13 a0=1f64000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.391:222): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.400:223): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.400:223): arch=40000003 syscall=125 success=no exit=-13 a0=1fd4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.400:223): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.408:224): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.408:224): arch=40000003 syscall=125 success=no exit=-13 a0=7f9a000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.408:224): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.416:225): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.416:225): arch=40000003 syscall=125 success=no exit=-13 a0=6dcb000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.416:225): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.427:226): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.427:226): arch=40000003 syscall=125 success=no exit=-13 a0=1f2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.427:226): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.435:227): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.435:227): arch=40000003 syscall=125 success=no exit=-13 a0=6b95000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.435:227): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.444:228): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.444:228): arch=40000003 syscall=125 success=no exit=-13 a0=1f28000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.444:228): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.452:229): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.452:229): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.452:229): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.460:230): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.460:230): arch=40000003 syscall=125 success=no exit=-13 a0=6eb3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.460:230): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.468:231): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.468:231): arch=40000003 syscall=125 success=no exit=-13 a0=6ca4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.468:231): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.476:232): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.476:232): arch=40000003 syscall=125 success=no exit=-13 a0=681d000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.476:232): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.484:233): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.484:233): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.484:233): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.492:234): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.492:234): arch=40000003 syscall=125 success=no exit=-13 a0=4b79000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.492:234): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.500:235): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.500:235): arch=40000003 syscall=125 success=no exit=-13 a0=1c2e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.500:235): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.508:236): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.508:236): arch=40000003 syscall=125 success=no exit=-13 a0=44dc000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.508:236): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.517:237): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.517:237): arch=40000003 syscall=125 success=no exit=-13 a0=1c12000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.517:237): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.525:238): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.525:238): arch=40000003 syscall=125 success=no exit=-13 a0=66e7000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.525:238): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.533:239): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.533:239): arch=40000003 syscall=125 success=no exit=-13 a0=1c01000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.533:239): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.541:240): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.541:240): arch=40000003 syscall=125 success=no exit=-13 a0=1b1e000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.541:240): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.549:241): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.549:241): arch=40000003 syscall=125 success=no exit=-13 a0=20ce000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.549:241): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.557:242): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.557:242): arch=40000003 syscall=125 success=no exit=-13 a0=1ffa000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.557:242): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.565:243): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.565:243): arch=40000003 syscall=125 success=no exit=-13 a0=64a4000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.565:243): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188905136.573:244): avc: denied { execmod } for pid=10069 comm="rhythmbox-metad" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188905136.573:244): arch=40000003 syscall=125 success=no exit=-13 a0=1bf3000 a1=48000 a2=5 a3=bfa81910 items=0 ppid=1 pid=10069 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="rhythmbox-metad" exe="/usr/libexec/rhythmbox-metadata" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188905136.573:244): path="/usr/lib/libtheora.so.0.2.0" >type=USER_AUTH msg=audit(1188905355.971:245): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188905355.972:246): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1188905355.993:247): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1188905355.999:248): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1188905355.999:249): user pid=10191 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1188907261.605:250): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188910861.856:251): user pid=10886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188911750.979:252): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188911750.979:253): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188911751.020:254): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188911751.031:255): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188911751.031:256): user pid=11111 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1188911892.990:257): avc: denied { execmod } for pid=11265 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188911892.990:257): arch=40000003 syscall=125 success=no exit=-13 a0=108d000 a1=48000 a2=5 a3=bfae3ee0 items=0 ppid=3134 pid=11265 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188911892.990:257): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188911894.261:258): avc: denied { execmod } for pid=11273 comm="totem-video-thu" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188911894.261:258): arch=40000003 syscall=125 success=no exit=-13 a0=53af000 a1=48000 a2=5 a3=bfad3d10 items=0 ppid=3134 pid=11273 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="totem-video-thu" exe="/usr/bin/totem-video-thumbnailer" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188911894.261:258): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188911981.457:259): avc: denied { execmod } for pid=11380 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188911981.457:259): arch=40000003 syscall=125 success=no exit=-13 a0=1aaa000 a1=48000 a2=5 a3=bfe8b290 items=0 ppid=11284 pid=11380 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188911981.457:259): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188912982.625:260): avc: denied { execmod } for pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188912982.625:260): arch=40000003 syscall=125 success=no exit=-13 a0=1aa5000 a1=48000 a2=5 a3=b64db880 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188912982.625:260): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188912983.073:261): avc: denied { execmod } for pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188912983.073:261): arch=40000003 syscall=125 success=no exit=-13 a0=6c67000 a1=48000 a2=5 a3=b64db360 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188912983.073:261): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188912983.195:262): avc: denied { execmod } for pid=11646 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188912983.195:262): arch=40000003 syscall=125 success=no exit=-13 a0=1077000 a1=48000 a2=5 a3=b64db360 items=0 ppid=11528 pid=11646 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188912983.195:262): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188913019.258:263): avc: denied { execmod } for pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188913019.258:263): arch=40000003 syscall=125 success=no exit=-13 a0=594d000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188913019.258:263): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188913019.838:264): avc: denied { execmod } for pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188913019.838:264): arch=40000003 syscall=125 success=no exit=-13 a0=7858000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188913019.838:264): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188913020.293:265): avc: denied { execmod } for pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188913020.293:265): arch=40000003 syscall=125 success=no exit=-13 a0=4f72000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188913020.293:265): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188913020.661:266): avc: denied { execmod } for pid=11656 comm="gst-launch-0.10" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188913020.661:266): arch=40000003 syscall=125 success=no exit=-13 a0=2e98000 a1=48000 a2=5 a3=bf863430 items=0 ppid=11655 pid=11656 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="gst-launch-0.10" exe="/usr/bin/gst-launch-0.10" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188913020.661:266): path="/usr/lib/libtheora.so.0.2.0" >type=AVC msg=audit(1188913715.992:267): avc: denied { execmod } for pid=11814 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188913715.992:267): arch=40000003 syscall=125 success=no exit=-13 a0=1008000 a1=48000 a2=5 a3=bfd465f0 items=0 ppid=11528 pid=11814 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188913715.992:267): path="/usr/lib/libtheora.so.0.2.0" >type=USER_AUTH msg=audit(1188913809.476:268): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188913809.476:269): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188913809.612:270): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1188914048.757:271): avc: denied { execmod } for pid=11865 comm="totem" name="libtheora.so.0.2.0" dev=dm-0 ino=5004862 scontext=user_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file >type=SYSCALL msg=audit(1188914048.757:271): arch=40000003 syscall=125 success=no exit=-13 a0=5412000 a1=48000 a2=5 a3=bff81820 items=0 ppid=11528 pid=11865 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts1 comm="totem" exe="/usr/bin/totem" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=AVC_PATH msg=audit(1188914048.757:271): path="/usr/lib/libtheora.so.0.2.0" >type=USER_AUTH msg=audit(1188914267.988:272): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188914267.989:273): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188914268.013:274): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188914268.019:275): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188914268.019:276): user pid=11932 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1188914304.569:277): avc: denied { write } for pid=11981 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188914304.569:277): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfcd5000 a2=63a494 a3=0 items=0 ppid=1 pid=11981 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ACCT msg=audit(1188914461.973:278): user pid=12008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1188914581.289:279): user pid=11831 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188914842.981:280): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188914842.981:281): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188914842.982:282): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188914842.987:283): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188914842.987:284): user pid=12063 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1188914896.887:285): bool=allow_execmod val=1 old_val=0 auid=500 >type=SYSCALL msg=audit(1188914896.887:285): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bfc92366 a2=2 a3=bfc92368 items=0 ppid=12063 pid=12096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setsebool" exe="/usr/sbin/setsebool" subj=user_u:system_r:semanage_t:s0 key=(null) >type=USER_AVC msg=audit(1188914897.014:286): user pid=8439 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='avc: received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1188914897.039:287): user pid=8874 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc: received policyload notice (seqno=2) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1188914897.119:288): user pid=2125 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=CRED_ACQ msg=audit(1188914937.176:289): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188914937.182:290): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188914937.182:291): user pid=12114 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188917636.867:292): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188917636.867:293): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188917636.890:294): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188917636.891:295): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188917636.891:296): user pid=12513 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188918061.096:297): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188919304.134:298): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188919304.134:299): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188919304.169:300): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1188919309.989:301): user pid=12761 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188920554.400:302): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188920554.401:303): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188920554.401:304): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188920554.409:305): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188920554.409:306): user pid=12898 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188920566.864:307): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188920566.864:308): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188920566.915:309): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188920698.866:310): user pid=12957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188921231.831:311): user pid=13101 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1188921231.831:312): user pid=13101 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1188921239.209:313): user pid=13103 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188921239.209:314): user pid=13103 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188921249.120:315): user pid=13106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188921249.120:316): user pid=13106 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1188921255.987:317): user pid=13108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188921255.987:318): user pid=13108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1188921260.500:319): user pid=13228 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188921343.443:2086): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1920 res=success, auditd pid=1920 >type=CONFIG_CHANGE msg=audit(1188921343.543:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188921343.543:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188921343.618:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188921343.618:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188921350.629:9): avc: denied { read write } for pid=2238 comm="modprobe" name="" dev=sockfs ino=9584 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188921350.629:9): avc: denied { read write } for pid=2238 comm="modprobe" name="" dev=sockfs ino=9594 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188921350.629:9): arch=40000003 syscall=11 success=yes exit=0 a0=93f41d8 a1=bfc4a858 a2=bfc4dc90 a3=93f41d8 items=0 ppid=2199 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188921350.629:9): path="socket:[9594]" >type=AVC_PATH msg=audit(1188921350.629:9): path="socket:[9584]" >type=AVC msg=audit(1188921350.814:10): avc: denied { write } for pid=2035 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188921350.814:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa46050 a2=63a494 a3=0 items=0 ppid=1 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188921366.299:11): user pid=2868 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188921368.036:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2751 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188921383.436:13): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188921383.440:14): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188921383.441:15): user pid=2977 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188921383.445:16): login pid=2977 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188921383.465:17): user pid=2977 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188921383.467:18): user pid=2977 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188921661.137:19): user pid=3539 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188921690.426:20): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188921690.427:21): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188921690.429:22): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188921690.434:23): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188921690.434:24): user pid=3577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188922341.970:25): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188922341.970:26): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188922341.971:27): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188922341.974:28): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188922341.974:29): user pid=3734 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188922384.121:30): user pid=4112 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188922384.122:31): user pid=4112 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1188922387.499:32): user pid=4230 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1188928734.864:1303): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927 >type=CONFIG_CHANGE msg=audit(1188928734.964:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188928734.964:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188928735.020:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188928735.020:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188928742.409:9): avc: denied { write } for pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188928742.409:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf978780 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1188928742.642:10): avc: denied { read write } for pid=2245 comm="modprobe" name="" dev=sockfs ino=9510 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188928742.642:10): avc: denied { read write } for pid=2245 comm="modprobe" name="" dev=sockfs ino=9520 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188928742.642:10): arch=40000003 syscall=11 success=yes exit=0 a0=991f1d8 a1=bff516c8 a2=bff54b00 a3=991f1d8 items=0 ppid=2204 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188928742.642:10): path="socket:[9520]" >type=AVC_PATH msg=audit(1188928742.642:10): path="socket:[9510]" >type=ANOM_ABEND msg=audit(1188928756.969:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2743 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1188928758.589:12): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1188928828.968:13): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188928828.973:14): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188928828.974:15): user pid=2976 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188928828.978:16): login pid=2976 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188928828.989:17): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188928828.990:18): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188928862.406:19): user pid=3340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1188928934.632:20): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3497 comm="telepathy-idle" sig=6 >type=USER_ACCT msg=audit(1188932461.687:21): user pid=3959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188934351.983:22): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188934351.984:23): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188934351.985:24): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188934351.992:25): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188934351.992:26): user pid=4068 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188934552.061:27): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1188934552.062:28): user pid=2976 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1188934555.462:29): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2607 comm="dhcdbd" sig=6 >type=AVC msg=audit(1188934560.863:30): avc: denied { read write } for pid=5870 comm="modprobe" name="" dev=sockfs ino=169428 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188934560.863:30): avc: denied { read write } for pid=5870 comm="modprobe" name="" dev=sockfs ino=169429 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188934560.863:30): arch=40000003 syscall=11 success=yes exit=0 a0=8142e08 a1=bfcfda38 a2=bfd00310 a3=8142e08 items=0 ppid=5869 pid=5870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188934560.863:30): path="socket:[169429]" >type=AVC_PATH msg=audit(1188934560.863:30): path="socket:[169428]" >type=ANOM_ABEND msg=audit(1188934562.278:31): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2008 comm="named" sig=6 >type=DAEMON_END msg=audit(1188934562.674:1304): auditd normal halt, sending auid=4294967295 pid=6310 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1927 >type=DAEMON_START msg=audit(1188934841.538:981): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1895 res=success, auditd pid=1895 >type=CONFIG_CHANGE msg=audit(1188934841.641:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188934841.641:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1188934842.021:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1188934842.021:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1188934849.212:9): avc: denied { read write } for pid=2212 comm="modprobe" name="" dev=sockfs ino=9241 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1188934849.212:9): avc: denied { read write } for pid=2212 comm="modprobe" name="" dev=sockfs ino=9251 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1188934849.212:9): arch=40000003 syscall=11 success=yes exit=0 a0=8ff61d8 a1=bf9ddac8 a2=bf9e0f00 a3=8ff61d8 items=0 ppid=2172 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1188934849.212:9): path="socket:[9251]" >type=AVC_PATH msg=audit(1188934849.212:9): path="socket:[9241]" >type=AVC msg=audit(1188934849.499:10): avc: denied { write } for pid=2010 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1188934849.499:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdfbb10 a2=63a494 a3=0 items=0 ppid=1 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1188934865.394:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1188934869.879:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2730 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1188934903.108:13): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1188934903.112:14): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1188934903.113:15): user pid=2951 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1188934903.117:16): login pid=2951 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1188934903.164:17): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1188934903.164:18): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USYS_CONFIG msg=audit(1188935304.499:19): user pid=3782 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188935383.161:20): user pid=3895 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1188935434.045:21): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1188935434.046:22): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1188935434.077:23): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188935434.093:24): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188935434.093:25): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1188935521.978:26): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188935521.978:27): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1188935522.074:28): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1188935573.059:29): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188935573.061:30): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188935573.062:31): user pid=4187 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188935599.585:32): user pid=4145 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1188935608.843:33): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1188935608.848:34): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1188935608.848:35): user pid=4190 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1188935917.499:36): user pid=4474 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188937433.610:37): user pid=4595 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188939661.179:38): user pid=4963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1188943261.758:39): user pid=5443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1188943505.499:40): user pid=5614 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1188990406.748:41): user pid=5725 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1188993661.715:42): user pid=6010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1188993902.497:43): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1188993902.498:44): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1188993902.519:45): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1188993902.539:46): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1188993902.539:47): user pid=6053 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USYS_CONFIG msg=audit(1188994899.500:48): user pid=6299 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189002239.617:49): user pid=6425 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189002319.421:50): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189002319.421:51): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189002319.423:52): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189002319.453:53): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189002319.453:54): user pid=6645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189002783.754:55): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189002785.860:56): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189002785.860:57): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189002785.861:58): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189002785.865:59): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189002785.866:60): user pid=6783 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=DAEMON_END msg=audit(1189004162.068:982): auditd normal halt, sending auid=500 pid=6986 subj=user_u:system_r:initrc_t:s0 res=success, auditd pid=1895 >type=DAEMON_START msg=audit(1189004162.308:8283): auditd start, ver=1.5.6, format=raw, auid=500 pid=7002 res=success, auditd pid=7002 >type=CONFIG_CHANGE msg=audit(1189004162.409:64): audit_enabled=1 old=1 by auid=500 subj=user_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189004162.409:65): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1189004162.417:66): audit_backlog_limit=320 old=320 by auid=500 subj=user_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189004162.417:67): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=ANOM_ABEND msg=audit(1189004165.192:68): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1976 comm="named" sig=6 >type=USER_ACCT msg=audit(1189004461.892:69): user pid=7129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189004750.500:70): user pid=7264 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189011219.195:71): user pid=7387 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189011276.407:72): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189011276.407:73): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189011276.444:74): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189011276.466:75): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189011276.466:76): user pid=7606 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189011397.581:77): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189011397.581:78): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189011397.582:79): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189011397.589:80): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189011397.589:81): user pid=8018 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189011441.943:82): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189011441.943:83): user pid=2951 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189011446.038:84): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2576 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189011459.865:85): avc: denied { read write } for pid=8654 comm="modprobe" name="" dev=sockfs ino=352928 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189011459.865:85): avc: denied { read write } for pid=8654 comm="modprobe" name="" dev=sockfs ino=352929 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189011459.865:85): arch=40000003 syscall=11 success=yes exit=0 a0=8f98e08 a1=bf9fb738 a2=bf9fe010 a3=8f98e08 items=0 ppid=8653 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189011459.865:85): path="socket:[352929]" >type=AVC_PATH msg=audit(1189011459.865:85): path="socket:[352928]" >type=DAEMON_END msg=audit(1189011464.215:8284): auditd normal halt, sending auid=4294967295 pid=9097 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=7002 >type=DAEMON_START msg=audit(1189011580.781:3697): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904 >type=CONFIG_CHANGE msg=audit(1189011580.881:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189011580.881:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189011581.166:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189011581.166:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189011588.804:9): avc: denied { read write } for pid=2223 comm="modprobe" name="" dev=sockfs ino=9398 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189011588.804:9): avc: denied { read write } for pid=2223 comm="modprobe" name="" dev=sockfs ino=9408 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189011588.804:9): arch=40000003 syscall=11 success=yes exit=0 a0=8be51d8 a1=bf8baaa8 a2=bf8bdee0 a3=8be51d8 items=0 ppid=2183 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189011588.804:9): path="socket:[9408]" >type=AVC_PATH msg=audit(1189011588.804:9): path="socket:[9398]" >type=AVC msg=audit(1189011589.047:10): avc: denied { write } for pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189011589.047:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8e5ef0 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189011603.542:11): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1189011661.889:12): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189011758.313:13): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189011758.317:14): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189011758.317:15): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189011758.322:16): login pid=2960 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189011758.331:17): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189011758.332:18): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189011940.974:19): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189011940.974:20): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189011940.975:21): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189011940.981:22): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189011940.981:23): user pid=3343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189012429.044:24): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189012429.044:25): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189012432.321:26): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2587 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189012437.866:27): avc: denied { read write } for pid=3892 comm="modprobe" name="" dev=sockfs ino=30258 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189012437.866:27): avc: denied { read write } for pid=3892 comm="modprobe" name="" dev=sockfs ino=30259 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189012437.866:27): arch=40000003 syscall=11 success=yes exit=0 a0=9099e08 a1=bfbc9d58 a2=bfbcc630 a3=9099e08 items=0 ppid=3891 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189012437.866:27): path="socket:[30259]" >type=AVC_PATH msg=audit(1189012437.866:27): path="socket:[30258]" >type=ANOM_ABEND msg=audit(1189012439.182:28): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1985 comm="named" sig=6 >type=DAEMON_END msg=audit(1189012439.525:3698): auditd normal halt, sending auid=4294967295 pid=4332 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1904 >type=DAEMON_START msg=audit(1189012862.782:6531): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897 >type=CONFIG_CHANGE msg=audit(1189012862.882:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189012862.882:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189012863.114:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189012863.114:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189012870.504:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9451 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189012870.504:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9461 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189012870.504:9): arch=40000003 syscall=11 success=yes exit=0 a0=9af11d8 a1=bfd12c88 a2=bfd160c0 a3=9af11d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189012870.504:9): path="socket:[9461]" >type=AVC_PATH msg=audit(1189012870.504:9): path="socket:[9451]" >type=AVC msg=audit(1189012870.599:10): avc: denied { write } for pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275161 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189012870.599:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe3d450 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189012885.178:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189012885.416:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2726 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189012907.256:13): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189012907.259:14): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189012907.260:15): user pid=2939 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189012907.265:16): login pid=2939 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189012907.285:17): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189012907.287:18): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189015261.527:19): user pid=3415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189015507.814:20): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189015525.430:21): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189015525.430:22): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189015525.503:23): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189015581.707:24): user pid=3425 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189016474.499:25): user pid=3641 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189016699.759:26): user pid=3789 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189018862.053:27): user pid=7501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189018920.637:28): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189018920.638:29): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189018920.687:30): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189018920.695:31): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189018920.695:32): user pid=7539 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189022461.968:33): user pid=8188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189023121.289:34): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189023121.289:35): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189023121.316:36): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189023121.328:37): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189023121.329:38): user pid=8261 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189024910.787:39): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189024910.787:40): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189024910.788:41): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189024910.792:42): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189024910.792:43): user pid=8429 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189026061.218:44): user pid=8538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189026460.099:45): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189026460.099:46): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189026460.100:47): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189026460.105:48): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189026460.105:49): user pid=8628 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189026472.482:50): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189026472.482:50): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9d2bf8 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189026480.778:51): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189026502.051:52): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189026502.051:52): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf9d2bf8 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189028417.261:53): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=8767 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189028428.970:54): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189028428.971:55): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189028428.998:56): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189028429.011:57): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189028429.011:58): user pid=9012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189028437.778:59): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189028952.062:60): user pid=9204 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189028952.062:61): user pid=9204 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189028957.864:62): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189028957.865:63): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189028957.866:64): user pid=9205 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189029208.359:65): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189029208.362:66): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189029208.362:67): user pid=9693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189029661.326:68): user pid=9834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189031542.543:69): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189031542.543:70): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189031542.544:71): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189031542.552:72): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189031542.552:73): user pid=10189 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189032654.419:74): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189032654.419:75): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189032654.420:76): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189032654.424:77): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189032654.424:78): user pid=10312 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189032951.356:79): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189032951.356:80): user pid=2939 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189032957.109:81): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2577 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189032969.479:82): avc: denied { read write } for pid=10962 comm="modprobe" name="" dev=sockfs ino=549787 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189032969.479:82): avc: denied { read write } for pid=10962 comm="modprobe" name="" dev=sockfs ino=549788 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189032969.479:82): arch=40000003 syscall=11 success=yes exit=0 a0=86d1e08 a1=bfecf408 a2=bfed1ce0 a3=86d1e08 items=0 ppid=10961 pid=10962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189032969.479:82): path="socket:[549788]" >type=AVC_PATH msg=audit(1189032969.479:82): path="socket:[549787]" >type=ANOM_ABEND msg=audit(1189032973.172:83): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1978 comm="named" sig=6 >type=DAEMON_END msg=audit(1189032976.272:6532): auditd normal halt, sending auid=4294967295 pid=11407 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1897 >type=DAEMON_START msg=audit(1189033194.092:2098): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1896 res=success, auditd pid=1896 >type=CONFIG_CHANGE msg=audit(1189033194.191:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189033194.191:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189033194.616:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189033194.616:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189033202.011:9): avc: denied { write } for pid=2011 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189033202.011:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfaec900 a2=63a494 a3=0 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189033202.287:10): avc: denied { read write } for pid=2216 comm="modprobe" name="" dev=sockfs ino=9440 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189033202.287:10): avc: denied { read write } for pid=2216 comm="modprobe" name="" dev=sockfs ino=9448 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189033202.287:10): arch=40000003 syscall=11 success=yes exit=0 a0=976a1d8 a1=bfddf0a8 a2=bfde24e0 a3=976a1d8 items=0 ppid=2175 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189033202.287:10): path="socket:[9448]" >type=AVC_PATH msg=audit(1189033202.287:10): path="socket:[9440]" >type=USER_ERR msg=audit(1189033217.431:11): user pid=2844 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189033226.602:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2714 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189033239.924:13): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189033239.928:14): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189033239.929:15): user pid=2947 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189033239.933:16): login pid=2947 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189033239.983:17): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189033239.984:18): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189033262.445:19): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189033824.413:20): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1189033826.036:21): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189033826.037:22): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189033826.037:23): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189033826.040:24): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189033826.040:25): user pid=3547 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USYS_CONFIG msg=audit(1189033995.499:26): user pid=3695 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189058082.387:27): user pid=3805 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189058461.835:28): user pid=4005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189062061.457:29): user pid=5532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189062600.499:30): user pid=5668 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189071380.652:31): user pid=5780 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189071545.298:32): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189071545.298:33): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189071545.299:34): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189071545.307:35): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189071545.308:36): user pid=5986 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1189071569.307:37): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1977 comm="named" sig=6 >type=USER_LOGIN msg=audit(1189072661.367:38): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189072665.051:39): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189072665.052:40): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189072665.248:41): user pid=6125 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=LOGIN msg=audit(1189072665.249:42): login pid=6125 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189072665.249:43): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189072665.250:44): user pid=6127 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1189072665.302:45): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=/dev/pts/2 res=success)' >type=USER_ACCT msg=audit(1189072861.644:46): user pid=6168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1189073821.194:47): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_END msg=audit(1189073821.194:48): user pid=6125 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189076461.109:49): user pid=6439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189080061.508:50): user pid=6551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189083661.729:51): user pid=6663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189084171.782:52): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189084171.782:53): user pid=2947 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189084173.989:54): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2578 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189084179.741:55): avc: denied { read write } for pid=7172 comm="modprobe" name="" dev=sockfs ino=399016 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189084179.741:55): avc: denied { read write } for pid=7172 comm="modprobe" name="" dev=sockfs ino=399017 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189084179.741:55): arch=40000003 syscall=11 success=yes exit=0 a0=83f6e08 a1=bfe6b398 a2=bfe6dc70 a3=83f6e08 items=0 ppid=7171 pid=7172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189084179.741:55): path="socket:[399017]" >type=AVC_PATH msg=audit(1189084179.741:55): path="socket:[399016]" >type=DAEMON_END msg=audit(1189084181.630:2099): auditd normal halt, sending auid=4294967295 pid=7612 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1896 >type=DAEMON_START msg=audit(1189090297.306:3830): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1897 res=success, auditd pid=1897 >type=CONFIG_CHANGE msg=audit(1189090297.406:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189090297.406:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189090297.681:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189090297.681:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189090304.530:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9233 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189090304.530:9): avc: denied { read write } for pid=2213 comm="modprobe" name="" dev=sockfs ino=9251 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189090304.530:9): arch=40000003 syscall=11 success=yes exit=0 a0=94661d8 a1=bff9d168 a2=bffa05a0 a3=94661d8 items=0 ppid=2174 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189090304.530:9): path="socket:[9251]" >type=AVC_PATH msg=audit(1189090304.530:9): path="socket:[9233]" >type=AVC msg=audit(1189090305.218:10): avc: denied { write } for pid=2012 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189090305.218:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf834e40 a2=63a494 a3=0 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189090319.784:11): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189090338.784:12): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189090338.787:13): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189090338.788:14): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189090338.792:15): login pid=2949 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189090338.812:16): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189090338.814:17): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189090340.597:18): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2705 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189090537.005:19): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189090537.005:20): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189090537.007:21): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189090537.012:22): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189090537.012:23): user pid=3490 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189090550.100:24): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189090550.100:24): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfe20708 a3=6 items=0 ppid=1 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1189090862.250:25): user pid=3569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1189090994.922:26): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=3553 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1189091219.880:27): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USYS_CONFIG msg=audit(1189091263.499:28): user pid=3747 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189092746.530:4136): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1921 res=success, auditd pid=1921 >type=CONFIG_CHANGE msg=audit(1189092746.630:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189092746.630:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189092746.691:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189092746.691:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189092753.396:9): avc: denied { read write } for pid=2237 comm="modprobe" name="" dev=sockfs ino=9585 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189092753.396:9): avc: denied { read write } for pid=2237 comm="modprobe" name="" dev=sockfs ino=9595 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189092753.396:9): arch=40000003 syscall=11 success=yes exit=0 a0=92b51d8 a1=bfbcf598 a2=bfbd29d0 a3=92b51d8 items=0 ppid=2198 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189092753.396:9): path="socket:[9595]" >type=AVC_PATH msg=audit(1189092753.396:9): path="socket:[9585]" >type=AVC msg=audit(1189092753.503:10): avc: denied { write } for pid=2036 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189092753.503:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb29080 a2=63a494 a3=0 items=0 ppid=1 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189092766.670:11): user pid=2867 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189092774.345:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2749 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189092781.957:13): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189092781.960:14): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189092781.961:15): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189092781.965:16): login pid=2970 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189092781.975:17): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189092781.975:18): user pid=2970 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189092836.311:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3300 comm="telepathy-idle" sig=6 >type=USER_AUTH msg=audit(1189092852.375:20): user pid=3505 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189092852.375:21): user pid=3505 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1189092856.500:22): user pid=3624 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189097642.382:8047): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1927 res=success, auditd pid=1927 >type=CONFIG_CHANGE msg=audit(1189097642.481:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189097642.481:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189097642.711:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189097642.711:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189097649.722:9): avc: denied { read write } for pid=2243 comm="modprobe" name="" dev=sockfs ino=9347 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189097649.722:9): avc: denied { read write } for pid=2243 comm="modprobe" name="" dev=sockfs ino=9361 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189097649.722:9): arch=40000003 syscall=11 success=yes exit=0 a0=8dd71d8 a1=bfa76c38 a2=bfa7a070 a3=8dd71d8 items=0 ppid=2204 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189097649.722:9): path="socket:[9361]" >type=AVC_PATH msg=audit(1189097649.722:9): path="socket:[9347]" >type=AVC msg=audit(1189097650.056:10): avc: denied { write } for pid=2042 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189097650.056:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf91c730 a2=63a494 a3=0 items=0 ppid=1 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189097664.710:11): user pid=2873 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189097664.975:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2756 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189097681.158:13): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189097681.161:14): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189097681.162:15): user pid=2969 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189097681.167:16): login pid=2969 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189097681.186:17): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189097681.188:18): user pid=2969 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189097962.203:19): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189097962.203:20): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189097962.204:21): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189097962.213:22): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189097962.213:23): user pid=3578 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189098061.852:24): user pid=3623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189098645.499:25): user pid=4110 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189099348.297:26): user pid=4443 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189099600.291:3883): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1924 res=success, auditd pid=1924 >type=CONFIG_CHANGE msg=audit(1189099600.391:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189099600.391:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189099600.750:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189099600.750:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189099607.937:9): avc: denied { read write } for pid=2240 comm="modprobe" name="" dev=sockfs ino=9393 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189099607.937:9): avc: denied { read write } for pid=2240 comm="modprobe" name="" dev=sockfs ino=9407 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189099607.937:9): arch=40000003 syscall=11 success=yes exit=0 a0=93b71d8 a1=bfa45c08 a2=bfa49040 a3=93b71d8 items=0 ppid=2202 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189099607.937:9): path="socket:[9407]" >type=AVC_PATH msg=audit(1189099607.937:9): path="socket:[9393]" >type=AVC msg=audit(1189099608.096:10): avc: denied { write } for pid=2039 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189099608.096:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc1c230 a2=63a494 a3=0 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189099622.325:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2753 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189099622.434:12): user pid=2870 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189099667.724:13): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189099667.726:14): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189099667.726:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189099667.728:16): login pid=2965 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189099667.736:17): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189099667.737:18): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189101661.897:19): user pid=3574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189105261.016:20): user pid=3762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189108519.347:21): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189108519.347:22): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189108519.348:23): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189108519.350:24): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189108519.350:25): user pid=4132 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189108528.021:26): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189108528.022:27): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189108528.022:28): user pid=4133 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189108660.692:29): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189108660.693:30): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189108660.773:31): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189108861.067:32): user pid=4162 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189109074.729:33): user pid=4149 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189109080.594:34): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189109080.595:35): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189109080.595:36): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189109080.605:37): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189109080.606:38): user pid=4198 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189109095.601:39): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189109095.601:40): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189109095.618:41): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189109101.729:42): user pid=4232 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189110969.700:43): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189110969.700:44): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189110969.712:45): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189111041.066:46): user pid=4677 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189111054.787:47): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189111054.787:48): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189111054.788:49): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189111054.792:50): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189111054.792:51): user pid=4717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189112461.110:52): user pid=4892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189115257.821:53): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189115257.822:54): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189115260.082:55): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2604 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189115269.478:56): avc: denied { read write } for pid=5679 comm="modprobe" name="" dev=sockfs ino=425241 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189115269.478:56): avc: denied { read write } for pid=5679 comm="modprobe" name="" dev=sockfs ino=425242 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189115269.478:56): arch=40000003 syscall=11 success=yes exit=0 a0=817ae08 a1=bfc5e998 a2=bfc61270 a3=817ae08 items=0 ppid=5678 pid=5679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189115269.478:56): path="socket:[425242]" >type=AVC_PATH msg=audit(1189115269.478:56): path="socket:[425241]" >type=ANOM_ABEND msg=audit(1189115270.701:57): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2005 comm="named" sig=6 >type=DAEMON_END msg=audit(1189115271.067:3884): auditd normal halt, sending auid=4294967295 pid=6119 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1924 >type=DAEMON_START msg=audit(1189143496.724:5576): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941 >type=CONFIG_CHANGE msg=audit(1189143496.824:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189143496.824:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189143496.972:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189143496.972:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189143504.150:9): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9298 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189143504.150:9): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9312 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189143504.150:9): arch=40000003 syscall=11 success=yes exit=0 a0=8d681d8 a1=bfce1ea8 a2=bfce52e0 a3=8d681d8 items=0 ppid=2218 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189143504.150:9): path="socket:[9312]" >type=AVC_PATH msg=audit(1189143504.150:9): path="socket:[9298]" >type=AVC msg=audit(1189143504.322:10): avc: denied { write } for pid=2056 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189143504.322:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf880690 a2=63a494 a3=0 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189143518.875:11): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189143531.128:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189143541.968:13): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189143542.972:14): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189143542.973:15): user pid=2993 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189143542.977:16): login pid=2993 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189143542.986:17): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189143542.986:18): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189143702.013:19): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3452 comm="telepathy-idle" sig=6 >type=USER_ACCT msg=audit(1189144862.063:20): user pid=3692 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189148426.499:21): user pid=4956 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189188818.318:22): user pid=5333 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189188949.132:23): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189188949.132:24): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189188949.171:25): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189188949.190:26): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189188949.190:27): user pid=5521 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1189188999.505:28): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2022 comm="named" sig=6 >type=USER_AUTH msg=audit(1189191180.880:29): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189191180.881:30): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189191181.046:31): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189191252.728:32): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189191252.729:33): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189191252.730:34): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189191252.734:35): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189191252.734:36): user pid=6023 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189191465.624:37): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189191465.624:37): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189191470.495:38): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189191495.864:39): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189191495.864:39): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189191499.642:40): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6152 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189191499.713:41): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189191661.461:42): user pid=6201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189191764.376:43): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189191764.376:43): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189191794.443:44): dev=vnet1 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189191794.443:44): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189191854.729:45): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189191855.189:46): dev=vnet1 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189192049.906:47): user pid=5987 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189192071.577:48): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189192071.578:49): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189192071.625:50): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189192071.632:51): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189192071.633:52): user pid=6430 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189193819.433:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189193819.433:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189193823.433:54): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189193846.020:55): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189193846.020:55): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189193848.867:56): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6638 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189193848.916:57): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189193954.339:58): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189193954.339:59): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189193954.428:60): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189193983.275:61): user pid=6688 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189193993.306:62): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189193993.306:62): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189193994.267:63): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6701 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189193994.300:64): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189195261.559:65): user pid=6780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189197478.105:66): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189197478.105:67): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189197478.117:68): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189197487.743:69): user pid=6855 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189197492.244:70): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189197492.244:70): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189197493.183:71): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=6864 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189197493.235:72): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189197507.937:73): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189197507.937:74): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189197507.941:75): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189197517.434:76): user pid=6904 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189198190.713:77): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189198190.714:78): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189198190.715:79): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189198190.721:80): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189198190.721:81): user pid=7094 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189198234.030:82): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189198234.030:82): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1189198861.695:83): user pid=7252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189202109.860:84): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189202109.860:85): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189202109.911:86): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189202109.960:87): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189202109.960:88): user pid=7406 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189202338.650:89): user pid=7454 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=CRED_ACQ msg=audit(1189202351.255:90): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189202351.256:91): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189202351.256:92): user pid=7456 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189202461.510:93): user pid=7498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189203173.116:94): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189203175.601:95): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189203175.601:95): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaeda8 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189205627.755:96): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=7643 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1189205643.325:97): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189205746.953:98): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189205746.953:98): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189205747.308:99): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189205793.746:100): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189205793.746:100): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189205832.348:101): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189206057.837:102): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189206057.837:102): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189206059.272:103): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=7957 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189206059.311:104): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189206062.433:105): user pid=7994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189206103.597:106): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189206103.597:106): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189206126.700:107): user pid=8030 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189206126.701:108): user pid=8030 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189206238.962:109): dev=vnet1 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189206238.962:109): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfcaed98 a3=6 items=0 ppid=1 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189206345.771:110): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189207320.970:111): dev=vnet1 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189209662.186:112): user pid=8274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189209769.250:113): user pid=8282 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189209778.261:114): user pid=8285 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1189210477.005:115): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189210477.018:116): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189210498.564:117): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189210498.567:118): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189210498.568:119): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189210498.597:120): login pid=2993 uid=0 old auid=500 new auid=500 >type=USER_START msg=audit(1189210498.621:121): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189210498.623:122): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USYS_CONFIG msg=audit(1189210553.500:123): user pid=8876 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189231445.210:124): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189231527.573:125): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189231527.574:126): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189231527.588:127): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189231527.595:128): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189231527.595:129): user pid=9365 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189231587.266:130): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189231587.266:131): user pid=2993 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189231592.214:132): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2621 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189231600.383:133): avc: denied { read write } for pid=9893 comm="modprobe" name="" dev=sockfs ino=699867 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189231600.383:133): avc: denied { read write } for pid=9893 comm="modprobe" name="" dev=sockfs ino=699868 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189231600.383:133): arch=40000003 syscall=11 success=yes exit=0 a0=9434e08 a1=bf88e5c8 a2=bf890ea0 a3=9434e08 items=0 ppid=9892 pid=9893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189231600.383:133): path="socket:[699868]" >type=AVC_PATH msg=audit(1189231600.383:133): path="socket:[699867]" >type=DAEMON_END msg=audit(1189231605.051:5577): auditd normal halt, sending auid=4294967295 pid=10333 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1941 >type=DAEMON_START msg=audit(1189231962.605:6078): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1978 res=success, auditd pid=1978 >type=CONFIG_CHANGE msg=audit(1189231962.705:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189231962.705:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189231962.931:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189231962.931:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189231970.252:9): avc: denied { write } for pid=2093 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189231970.252:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf95ff70 a2=63a494 a3=0 items=0 ppid=1 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189231970.525:10): avc: denied { read write } for pid=2296 comm="modprobe" name="" dev=sockfs ino=9550 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189231970.525:10): avc: denied { read write } for pid=2296 comm="modprobe" name="" dev=sockfs ino=9558 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189231970.525:10): arch=40000003 syscall=11 success=yes exit=0 a0=99951d8 a1=bfcc1688 a2=bfcc4ac0 a3=99951d8 items=0 ppid=2255 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189231970.525:10): path="socket:[9558]" >type=AVC_PATH msg=audit(1189231970.525:10): path="socket:[9550]" >type=USER_ERR msg=audit(1189231985.527:11): user pid=2924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189232001.544:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2807 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189232027.719:13): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1189232027.720:14): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1189232146.486:15): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189232146.490:16): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189232146.490:17): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189232146.494:18): login pid=3018 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189232146.502:19): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189232146.502:20): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189232182.587:21): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189232182.588:22): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189232182.589:23): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189232182.623:24): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189232182.624:25): user pid=3392 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189234861.762:26): user pid=3584 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189235331.014:27): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189235331.014:28): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189235331.015:29): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189235331.021:30): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189235331.021:31): user pid=3605 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189235643.746:32): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189235643.746:33): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189235643.807:34): user pid=3688 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189235769.954:35): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189235769.955:36): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189235769.955:37): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189235769.961:38): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189235769.961:39): user pid=3757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189235824.904:40): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189235824.904:41): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189235824.905:42): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189235824.911:43): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189235824.911:44): user pid=3798 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189235872.191:45): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189235872.191:46): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189235872.196:47): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_POLICY_LOAD msg=audit(1189236355.788:48): policy loaded auid=500 >type=SYSCALL msg=audit(1189236355.788:48): arch=40000003 syscall=4 success=yes exit=1586511 a0=4 a1=b7de9000 a2=18354f a3=bfa11778 items=0 ppid=4551 pid=4552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1189236355.844:49): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_ABEND msg=audit(1189236386.236:50): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2059 comm="named" sig=6 >type=USER_END msg=audit(1189236701.475:51): user pid=3862 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189236733.500:52): user pid=4886 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189244752.524:53): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189245661.211:54): user pid=5406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189249261.279:55): user pid=5690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189251649.749:56): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189251649.749:57): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189251649.859:58): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189251744.703:59): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189251744.704:60): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189251744.704:61): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189251744.750:62): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189251744.750:63): user pid=6243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189251761.917:64): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189251761.917:64): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf88c178 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189251776.321:65): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189251838.551:66): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189251838.551:66): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf88c178 a3=6 items=0 ppid=1 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_END msg=audit(1189252607.646:67): user pid=6203 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189252862.352:68): user pid=11239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189253437.872:69): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189253437.872:70): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189253437.935:71): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189253437.937:72): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189253437.937:73): user pid=11550 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1189254499.613:74): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189254499.613:75): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189254499.613:76): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189254499.618:77): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189254499.618:78): user pid=11670 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_ABEND msg=audit(1189254511.959:79): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=11703 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1189254518.035:80): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189254749.956:81): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189254749.957:82): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189254749.958:83): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189254749.961:84): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189254749.961:85): user pid=11868 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189254902.974:86): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189254902.975:87): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189254902.975:88): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189254902.985:89): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189254902.985:90): user pid=12005 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189256461.822:91): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189257713.048:92): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189257713.049:93): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189257713.050:94): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189257713.056:95): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189257713.057:96): user pid=12396 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189257929.814:97): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189257929.814:98): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189257929.841:99): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189257941.071:100): user pid=12480 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189258525.499:101): user pid=12640 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189275478.000:102): user pid=12762 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189275551.936:103): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=failed)' >type=USER_LOGIN msg=audit(1189275551.937:104): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:20 res=failed)' >type=USER_AUTH msg=audit(1189275577.161:105): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=failed)' >type=USER_LOGIN msg=audit(1189275577.161:106): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:20 res=failed)' >type=USER_AUTH msg=audit(1189275686.750:107): user pid=12943 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:20 res=success)' >type=USYS_CONFIG msg=audit(1189276326.528:108): user pid=13194 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189278318.005:109): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189278400.622:110): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189278400.622:111): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189278400.623:112): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189278400.681:113): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189278400.681:114): user pid=13482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189279203.457:115): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189279203.457:116): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189279203.458:117): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189279203.459:118): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189279203.459:119): user pid=14195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189279256.463:120): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189279256.463:121): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189279256.463:122): user pid=14201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189281662.017:123): user pid=14520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189281736.499:124): user pid=14810 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189318165.995:125): user pid=15196 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189318208.222:126): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189318208.222:127): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189318208.223:128): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189318208.274:129): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189318208.274:130): user pid=15357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189318251.998:131): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189318252.001:132): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189318252.001:133): user pid=15793 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189319689.984:134): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189319704.436:135): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189319704.437:136): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189319704.553:137): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189319719.018:138): user pid=15937 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189321261.614:139): user pid=16210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189324861.654:140): user pid=16445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189327035.500:141): user pid=16822 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189329396.124:142): user pid=17165 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189332061.225:143): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189335661.294:144): user pid=17680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189336991.930:145): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189336991.930:146): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189336991.932:147): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189336991.938:148): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189336991.938:149): user pid=17802 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189339261.562:150): user pid=18416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189342861.607:151): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189345017.955:152): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189345017.955:153): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189345017.990:154): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189345478.548:155): user pid=18959 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189346461.645:156): user pid=19441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189346621.342:157): user pid=19494 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189346632.535:158): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189346632.535:159): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189346632.536:160): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189346632.539:161): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189346632.539:162): user pid=19496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189347758.302:163): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189347758.302:164): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189347758.303:165): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189347758.311:166): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189347758.311:167): user pid=19757 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189348664.180:168): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189348664.180:169): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189348664.180:170): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189348664.180:171): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189348664.180:172): user pid=20146 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189348685.342:173): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189348685.342:174): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189348685.342:175): user pid=20177 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189349455.675:176): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189349455.675:177): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189349455.744:178): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189349455.770:179): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189349455.771:180): user pid=21011 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189349486.837:181): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189349486.838:182): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189349486.838:183): user pid=21012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189350061.823:184): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189350216.220:185): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189350218.497:186): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189350218.497:187): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189350218.498:188): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189350218.499:189): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189350218.499:190): user pid=21128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189350240.924:191): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189350240.936:192): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189350240.936:193): user pid=21131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189351204.457:194): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189351207.942:195): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189351207.943:196): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189351207.943:197): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189351207.949:198): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189351207.949:199): user pid=21329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189351371.959:200): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189351371.963:201): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189351371.963:202): user pid=21450 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189353662.051:203): user pid=21710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189357261.103:204): user pid=21943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189358533.364:205): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189358533.364:206): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189358533.365:207): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189358533.367:208): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189358533.367:209): user pid=22056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1189358533.750:210): avc: denied { read write } for pid=22073 comm="modprobe" name="" dev=sockfs ino=1555449 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189358533.750:210): avc: denied { read write } for pid=22073 comm="modprobe" name="" dev=sockfs ino=1555450 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189358533.750:210): arch=40000003 syscall=11 success=yes exit=0 a0=9b15bc8 a1=bf827df8 a2=bf82a6d0 a3=9b15bc8 items=0 ppid=22072 pid=22073 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189358533.750:210): path="socket:[1555450]" >type=AVC_PATH msg=audit(1189358533.750:210): path="socket:[1555449]" >type=USER_ACCT msg=audit(1189360861.135:211): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189363509.290:212): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189363509.291:213): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189363509.292:214): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189363509.294:215): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189363509.294:216): user pid=23155 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189364461.165:217): user pid=23593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189365504.032:218): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189365504.032:219): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189365504.034:220): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189365504.034:221): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189365504.034:222): user pid=23845 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189365760.873:223): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189365760.873:224): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189365760.874:225): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189365760.875:226): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189365760.875:227): user pid=23899 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189366228.309:228): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189366228.309:229): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366228.310:230): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366228.311:231): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366228.311:232): user pid=30488 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366334.227:233): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366334.228:234): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366334.228:235): user pid=13178 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366351.743:236): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366351.743:237): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366351.743:238): user pid=13179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366360.940:239): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366360.940:240): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366360.940:241): user pid=13182 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366501.601:242): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366501.601:243): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366501.601:244): user pid=30348 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366510.167:245): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366510.168:246): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366510.168:247): user pid=30349 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366539.477:248): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366539.480:249): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366539.480:250): user pid=30361 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366682.531:251): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366682.537:252): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366682.537:253): user pid=30417 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189366718.766:254): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189366718.766:255): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189366718.766:256): user pid=30453 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189366924.425:257): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189366924.425:258): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189366924.427:259): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189366924.427:260): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189366924.427:261): user pid=30600 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189366935.176:262): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189366935.184:263): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189366935.184:264): user pid=30603 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_LOGIN msg=audit(1189367737.212:265): user pid=30837 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=marketa: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1189367751.261:266): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189367751.266:267): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189367751.267:268): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189367751.543:269): user pid=30841 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189367751.547:270): login pid=30841 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189367751.547:271): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189367751.550:272): user pid=30843 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189368061.250:273): user pid=30904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1189368485.865:274): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189368485.869:275): user pid=30841 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1189369297.855:276): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189369297.855:277): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189369297.914:278): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_LOGIN msg=audit(1189369916.547:279): user pid=31119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=marketa: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_LOGIN msg=audit(1189369925.816:280): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189369925.822:281): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189369925.823:282): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189369926.067:283): user pid=31121 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189369926.078:284): login pid=31121 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189369926.079:285): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189369926.082:286): user pid=31123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1189371117.738:287): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189371117.740:288): user pid=31121 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189371661.603:289): user pid=31379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189372070.507:290): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189372072.750:291): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189372072.750:292): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189372072.751:293): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189372072.795:294): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189372072.795:295): user pid=31482 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189372865.883:296): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189372870.106:297): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189372874.514:298): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189372874.514:299): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189372874.515:300): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189372874.520:301): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189372874.520:302): user pid=31645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_LOGIN msg=audit(1189373669.385:303): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189373671.729:304): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189373671.730:305): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189373671.921:306): user pid=31751 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189373671.924:307): login pid=31751 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1189373671.925:308): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189373671.930:309): user pid=31753 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1189373672.053:310): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189373672.054:311): user pid=31751 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189373710.115:312): user pid=31065 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189373768.440:313): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189373772.352:314): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189373773.829:315): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189373773.830:316): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189373773.830:317): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189373773.836:318): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189373773.836:319): user pid=31779 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1189373846.015:320): avc: denied { read write } for pid=31940 comm="modprobe" name="" dev=sockfs ino=2011554 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189373846.015:320): avc: denied { read write } for pid=31940 comm="modprobe" name="" dev=sockfs ino=2011555 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189373846.015:320): arch=40000003 syscall=11 success=yes exit=0 a0=84a3530 a1=bfb9a968 a2=bfb9d240 a3=84a3530 items=0 ppid=31939 pid=31940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189373846.015:320): path="socket:[2011555]" >type=AVC_PATH msg=audit(1189373846.015:320): path="socket:[2011554]" >type=AVC msg=audit(1189373846.096:321): avc: denied { write } for pid=31946 comm="modprobe" name="iptables.l31943" dev=dm-0 ino=6044359 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file >type=AVC msg=audit(1189373846.096:321): avc: denied { read } for pid=31946 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file >type=AVC msg=audit(1189373846.096:321): avc: denied { read write } for pid=31946 comm="modprobe" name="" dev=sockfs ino=2011575 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189373846.096:321): avc: denied { read write } for pid=31946 comm="modprobe" name="" dev=sockfs ino=2011576 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189373846.096:321): arch=40000003 syscall=11 success=yes exit=0 a0=88a56f8 a1=bfc3ebb8 a2=bfc3f2fc a3=88a56f8 items=0 ppid=31945 pid=31946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189373846.096:321): path="socket:[2011576]" >type=AVC_PATH msg=audit(1189373846.096:321): path="socket:[2011575]" >type=AVC_PATH msg=audit(1189373846.096:321): path="/proc/net/ip_tables_names" >type=AVC_PATH msg=audit(1189373846.096:321): path="/tmp/iptables.l31943" >type=USER_LOGIN msg=audit(1189374042.335:322): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189374046.449:323): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=failed)' >type=USER_LOGIN msg=audit(1189374046.500:324): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189374048.696:325): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189374048.697:326): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189374048.892:327): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189374048.893:328): login pid=31978 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1189374048.894:329): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189374048.898:330): user pid=31980 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1189374048.967:331): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189374048.969:332): user pid=31978 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1189374059.243:333): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189374061.938:334): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189374061.939:335): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189374062.133:336): user pid=31999 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189374062.134:337): login pid=31999 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1189374062.134:338): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189374062.139:339): user pid=32001 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1189374062.204:340): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_END msg=audit(1189374062.205:341): user pid=31999 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=AVC msg=audit(1189374090.346:342): avc: denied { read write } for pid=32039 comm="modprobe" name="" dev=sockfs ino=2018397 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189374090.346:342): avc: denied { read write } for pid=32039 comm="modprobe" name="" dev=sockfs ino=2018398 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189374090.346:342): arch=40000003 syscall=11 success=yes exit=0 a0=8aa0530 a1=bfd19ae8 a2=bfd1c3c0 a3=8aa0530 items=0 ppid=32038 pid=32039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189374090.346:342): path="socket:[2018398]" >type=AVC_PATH msg=audit(1189374090.346:342): path="socket:[2018397]" >type=AVC msg=audit(1189374091.273:343): avc: denied { read write } for pid=32313 comm="modprobe" name="" dev=sockfs ino=2018714 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189374091.273:343): avc: denied { read write } for pid=32313 comm="modprobe" name="" dev=sockfs ino=2018715 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189374091.273:343): arch=40000003 syscall=11 success=yes exit=0 a0=8458530 a1=bfbc6188 a2=bfbc8a60 a3=8458530 items=0 ppid=32312 pid=32313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189374091.273:343): path="socket:[2018715]" >type=AVC_PATH msg=audit(1189374091.273:343): path="socket:[2018714]" >type=AVC msg=audit(1189374091.285:344): avc: denied { write } for pid=32319 comm="modprobe" name="iptables.f32316" dev=dm-0 ino=6044359 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file >type=AVC msg=audit(1189374091.285:344): avc: denied { read } for pid=32319 comm="modprobe" name="ip_tables_names" dev=proc ino=-268435041 scontext=user_u:system_r:insmod_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file >type=AVC msg=audit(1189374091.285:344): avc: denied { read write } for pid=32319 comm="modprobe" name="" dev=sockfs ino=2018723 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189374091.285:344): avc: denied { read write } for pid=32319 comm="modprobe" name="" dev=sockfs ino=2018724 scontext=user_u:system_r:insmod_t:s0 tcontext=user_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189374091.285:344): arch=40000003 syscall=11 success=yes exit=0 a0=93426f8 a1=bf892808 a2=bf892f4c a3=93426f8 items=0 ppid=32318 pid=32319 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="modprobe" exe="/sbin/modprobe" subj=user_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189374091.285:344): path="socket:[2018724]" >type=AVC_PATH msg=audit(1189374091.285:344): path="socket:[2018723]" >type=AVC_PATH msg=audit(1189374091.285:344): path="/proc/net/ip_tables_names" >type=AVC_PATH msg=audit(1189374091.285:344): path="/tmp/iptables.f32316" >type=USER_AUTH msg=audit(1189374181.144:345): user pid=32340 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189374183.322:346): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189374183.322:347): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189374183.396:348): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189374183.396:349): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1189374231.489:350): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189374231.490:351): user pid=32341 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189374254.126:352): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189374255.486:353): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189374255.486:354): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189374255.487:355): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189374255.488:356): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189374255.489:357): user pid=32389 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189374262.128:358): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189374262.128:359): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189374262.129:360): user pid=32390 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_ABEND msg=audit(1189374758.172:361): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=32544 comm="totem-video-thu" sig=11 >type=USER_END msg=audit(1189374770.094:362): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189374770.094:363): user pid=3018 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189374773.557:364): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2658 comm="dhcdbd" sig=6 >type=DAEMON_END msg=audit(1189374791.286:6079): auditd normal halt, sending auid=4294967295 pid=894 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1978 >type=DAEMON_START msg=audit(1189401575.144:4100): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904 >type=CONFIG_CHANGE msg=audit(1189401575.250:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189401575.250:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189401575.441:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189401575.442:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189401582.811:9): avc: denied { write } for pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189401582.811:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb7af40 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189401583.101:10): avc: denied { read write } for pid=2222 comm="modprobe" name="" dev=sockfs ino=9444 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189401583.101:10): avc: denied { read write } for pid=2222 comm="modprobe" name="" dev=sockfs ino=9452 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189401583.101:10): arch=40000003 syscall=11 success=yes exit=0 a0=88f1710 a1=bfc37558 a2=bfc3a990 a3=88f1710 items=0 ppid=2181 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189401583.101:10): path="socket:[9452]" >type=AVC_PATH msg=audit(1189401583.101:10): path="socket:[9444]" >type=ANOM_ABEND msg=audit(1189401596.610:11): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2710 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189401598.615:12): user pid=2850 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189401614.975:13): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189401614.977:14): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189401614.978:15): user pid=2960 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189401614.980:16): login pid=2960 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189401614.988:17): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189401614.989:18): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189404061.417:19): user pid=3665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189405395.499:20): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189407916.430:21): user pid=4468 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189408056.523:22): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189408056.523:23): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189408056.647:24): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189408056.733:25): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189408056.733:26): user pid=4775 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189408121.099:27): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189408121.099:28): user pid=2960 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189408126.664:29): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2584 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189408141.782:30): avc: denied { read write } for pid=7773 comm="modprobe" name="" dev=sockfs ino=124366 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189408141.782:30): avc: denied { read write } for pid=7773 comm="modprobe" name="" dev=sockfs ino=124367 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189408141.782:30): arch=40000003 syscall=11 success=yes exit=0 a0=852e530 a1=bf9cef08 a2=bf9d17e0 a3=852e530 items=0 ppid=7772 pid=7773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189408141.782:30): path="socket:[124367]" >type=AVC_PATH msg=audit(1189408141.782:30): path="socket:[124366]" >type=ANOM_ABEND msg=audit(1189408144.307:31): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1985 comm="named" sig=6 >type=DAEMON_END msg=audit(1189408147.994:4101): auditd normal halt, sending auid=4294967295 pid=8404 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1904 >type=DAEMON_START msg=audit(1189408243.281:1577): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1900 res=success, auditd pid=1900 >type=CONFIG_CHANGE msg=audit(1189408243.381:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189408243.381:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189408243.425:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189408243.425:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189408250.897:9): avc: denied { write } for pid=2015 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189408250.897:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff4b550 a2=63a494 a3=0 items=0 ppid=1 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189408251.044:10): avc: denied { read write } for pid=2219 comm="modprobe" name="" dev=sockfs ino=9487 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189408251.044:10): avc: denied { read write } for pid=2219 comm="modprobe" name="" dev=sockfs ino=9497 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189408251.044:10): arch=40000003 syscall=11 success=yes exit=0 a0=8154710 a1=bfaaf478 a2=bfab28b0 a3=8154710 items=0 ppid=2177 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189408251.044:10): path="socket:[9497]" >type=AVC_PATH msg=audit(1189408251.044:10): path="socket:[9487]" >type=USER_ERR msg=audit(1189408265.700:11): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189408265.755:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2734 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189408418.611:13): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189408418.615:14): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189408418.616:15): user pid=2949 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189408418.618:16): login pid=2949 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189408418.626:17): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189408418.627:18): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189410482.513:19): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189410482.513:20): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189410482.588:21): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189410754.412:22): user pid=3596 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189411261.847:23): user pid=3876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189411801.885:24): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189411801.885:25): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189411801.887:26): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189411801.892:27): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189411801.892:28): user pid=3946 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189411877.189:29): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189411877.189:30): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189411877.196:31): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1189412257.885:32): user pid=4816 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1189412258.418:33): user pid=4820 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1189412258.684:34): user pid=4833 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1189412258.686:35): user pid=4834 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1189412265.979:36): user pid=3988 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189412571.028:37): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189412571.028:38): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189412571.030:39): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189412571.037:40): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189412571.037:41): user pid=5569 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189412663.004:42): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189412663.004:43): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189412663.005:44): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189412663.012:45): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189412663.012:46): user pid=5611 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189414195.318:47): user pid=6464 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1189414198.909:48): user pid=6464 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1189414218.873:49): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189414218.874:50): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189414218.875:51): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189414218.877:52): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189414218.877:53): user pid=6484 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189414862.051:54): user pid=6623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189418461.101:55): user pid=7018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189418541.679:56): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189418541.679:57): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189418541.681:58): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189418541.682:59): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189418541.683:60): user pid=7061 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189418559.609:61): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189418559.610:62): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189418559.610:63): user pid=7065 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189418619.446:64): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189418619.446:65): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189418619.446:66): user pid=7076 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189418759.126:67): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189418759.128:68): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189418759.128:69): user pid=7159 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189418788.595:70): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189418788.600:71): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189418788.600:72): user pid=7235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189421976.125:73): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189421976.125:74): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189421976.127:75): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189421976.129:76): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189421976.129:77): user pid=8195 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189422061.171:78): user pid=8212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189424108.902:79): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189424108.902:80): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424108.903:81): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424108.908:82): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424108.908:83): user pid=8500 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424316.474:84): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424316.475:85): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424316.475:86): user pid=8590 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424336.087:87): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424336.087:88): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424336.087:89): user pid=8592 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424349.853:90): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424349.853:91): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424349.854:92): user pid=8594 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424512.152:93): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424512.152:94): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424512.152:95): user pid=8615 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424529.436:96): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424529.437:97): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424529.437:98): user pid=8616 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424535.695:99): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424535.695:100): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424535.695:101): user pid=8617 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424597.932:102): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424597.933:103): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424597.933:104): user pid=8621 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424646.151:105): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424646.151:106): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424646.151:107): user pid=8623 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189424680.177:108): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189424680.182:109): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189424680.182:110): user pid=8644 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189425661.212:111): user pid=9199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189426380.397:112): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189426380.397:113): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189426380.399:114): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189426380.404:115): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189426380.405:116): user pid=17403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189426520.893:117): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189426520.894:118): user pid=2949 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189426524.817:119): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2581 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189426532.950:120): avc: denied { read write } for pid=17973 comm="modprobe" name="" dev=sockfs ino=558457 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189426532.950:120): avc: denied { read write } for pid=17973 comm="modprobe" name="" dev=sockfs ino=558458 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189426532.950:120): arch=40000003 syscall=11 success=yes exit=0 a0=9327530 a1=bf8d5608 a2=bf8d7ee0 a3=9327530 items=0 ppid=17972 pid=17973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189426532.950:120): path="socket:[558458]" >type=AVC_PATH msg=audit(1189426532.950:120): path="socket:[558457]" >type=ANOM_ABEND msg=audit(1189426535.014:121): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1981 comm="named" sig=6 >type=DAEMON_END msg=audit(1189426537.482:1578): auditd normal halt, sending auid=4294967295 pid=18416 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1900 >type=DAEMON_START msg=audit(1189428981.860:7803): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1904 res=success, auditd pid=1904 >type=CONFIG_CHANGE msg=audit(1189428981.960:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189428981.960:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189428982.227:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189428982.227:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189428989.696:9): avc: denied { read write } for pid=2220 comm="modprobe" name="" dev=sockfs ino=9334 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189428989.696:9): avc: denied { read write } for pid=2220 comm="modprobe" name="" dev=sockfs ino=9348 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189428989.696:9): arch=40000003 syscall=11 success=yes exit=0 a0=8233710 a1=bfa23568 a2=bfa269a0 a3=8233710 items=0 ppid=2181 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189428989.696:9): path="socket:[9348]" >type=AVC_PATH msg=audit(1189428989.696:9): path="socket:[9334]" >type=AVC msg=audit(1189428989.821:10): avc: denied { write } for pid=2019 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189428989.821:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf973780 a2=63a494 a3=0 items=0 ppid=1 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189429004.579:11): user pid=2850 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189429015.731:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2733 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189429027.098:13): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189429027.101:14): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189429027.102:15): user pid=2945 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189429027.107:16): login pid=2945 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189429027.127:17): user pid=2945 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189429027.128:18): user pid=2945 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189429106.809:19): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189429106.810:20): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189429106.811:21): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189429106.820:22): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189429106.820:23): user pid=3338 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189429261.690:24): user pid=3430 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189429702.499:25): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189430939.983:26): user pid=4069 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189431855.499:27): user pid=4630 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189432290.947:28): user pid=4945 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189432421.115:6897): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929 >type=CONFIG_CHANGE msg=audit(1189432421.215:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189432421.215:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189432421.287:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189432421.287:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189432428.470:9): avc: denied { read write } for pid=2247 comm="modprobe" name="" dev=sockfs ino=9153 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189432428.470:9): avc: denied { read write } for pid=2247 comm="modprobe" name="" dev=sockfs ino=9165 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189432428.470:9): arch=40000003 syscall=11 success=yes exit=0 a0=8a04710 a1=bfbf0db8 a2=bfbf41f0 a3=8a04710 items=0 ppid=2206 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189432428.470:9): path="socket:[9165]" >type=AVC_PATH msg=audit(1189432428.470:9): path="socket:[9153]" >type=AVC msg=audit(1189432428.470:10): avc: denied { write } for pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189432428.470:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb47150 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189432442.778:11): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189432454.930:12): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189432454.934:13): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189432454.935:14): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189432454.939:15): login pid=2983 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189432454.960:16): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189432454.962:17): user pid=2983 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189432861.209:18): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189433096.345:19): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1189433099.490:20): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189433099.491:21): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189433099.492:22): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189433099.494:23): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189433099.494:24): user pid=3693 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_LOGIN msg=audit(1189433848.995:25): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.0.0.10, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189433860.297:26): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189433860.297:27): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189433860.395:28): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=LOGIN msg=audit(1189433860.396:29): login pid=3750 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1189433860.396:30): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189433860.397:31): user pid=3753 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1189433860.491:32): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_END msg=audit(1189433860.491:33): user pid=3750 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=10.0.0.10, addr=10.0.0.10, terminal=ssh res=success)' >type=USER_AUTH msg=audit(1189433869.262:34): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=failed)' >type=USER_AUTH msg=audit(1189433871.911:35): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189433871.911:36): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189433871.912:37): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189433871.916:38): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189433871.916:39): user pid=3772 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189435006.187:40): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189435010.508:41): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189435011.825:42): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189435011.825:43): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189435011.826:44): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189435011.832:45): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189435011.832:46): user pid=4351 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189435130.955:47): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189435130.955:48): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189435130.957:49): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189435130.962:50): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189435130.962:51): user pid=4516 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189436461.571:52): user pid=4961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189436654.602:53): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189436654.603:54): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189436654.604:55): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189436654.610:56): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189436654.610:57): user pid=4983 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189437790.606:58): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189437790.607:59): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189437790.608:60): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189437790.612:61): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189437790.612:62): user pid=5212 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189437995.098:63): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189437995.106:64): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189437995.106:65): user pid=5295 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189438005.678:66): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189438005.678:66): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfbf9ce8 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189438012.434:67): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189438030.606:68): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189438030.606:68): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfbf9ce8 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189438685.571:69): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=5444 comm="virt-viewer" sig=11 >type=USER_ACCT msg=audit(1189440061.585:70): user pid=5967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189440106.129:71): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189440106.129:72): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189440106.176:73): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189440106.186:74): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189440106.186:75): user pid=5975 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189440114.270:76): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189441214.547:77): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=failed)' >type=USER_AUTH msg=audit(1189441216.553:78): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189441216.553:79): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189441216.584:80): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189441216.590:81): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189441216.590:82): user pid=6179 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189443661.902:83): user pid=6857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189443890.558:84): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189443890.558:85): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189443890.559:86): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189443890.561:87): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189443890.561:88): user pid=6934 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189444503.685:89): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189444503.685:90): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189444503.686:91): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189444503.689:92): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189444503.689:93): user pid=7850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189444506.460:94): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189444506.464:95): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189444506.464:96): user pid=7851 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189444567.435:97): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189444567.440:98): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189444567.440:99): user pid=7901 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1189445162.499:100): user pid=8514 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189445639.379:101): user pid=8874 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189445639.300:102): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2136 comm="hcid" sig=6 >type=USER_ACCT msg=audit(1189447261.456:103): user pid=9873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189447763.309:104): user pid=10085 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189447763.309:105): user pid=10085 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1189447780.499:106): user pid=10316 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189454299.114:49): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1941 res=success, auditd pid=1941 >type=CONFIG_CHANGE msg=audit(1189454299.214:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189454299.214:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189454299.273:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189454299.273:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189454306.066:9): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9232 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189454306.066:9): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9254 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189454306.066:9): arch=40000003 syscall=11 success=yes exit=0 a0=86a3710 a1=bfd71648 a2=bfd74a80 a3=86a3710 items=0 ppid=2217 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189454306.066:9): path="socket:[9254]" >type=AVC_PATH msg=audit(1189454306.066:9): path="socket:[9232]" >type=AVC msg=audit(1189454306.359:10): avc: denied { write } for pid=2056 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189454306.359:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf823ad0 a2=63a494 a3=0 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189454320.055:11): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189454324.740:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2770 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189454366.510:13): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189454366.513:14): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189454366.514:15): user pid=2994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189454366.519:16): login pid=2994 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189454366.528:17): user pid=2994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189454366.529:18): user pid=2994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189454425.150:19): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189454425.151:20): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189454425.279:21): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189454462.018:22): user pid=3440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189454997.740:23): user pid=3431 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189455727.736:24): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189455727.737:25): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189455727.738:26): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189455727.739:27): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189455727.739:28): user pid=3711 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189455737.123:29): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189455737.123:30): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189455737.123:31): user pid=3718 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189455807.008:32): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189455807.010:33): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189455807.010:34): user pid=3747 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189456340.643:35): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189456340.644:36): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189456340.662:37): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189456395.373:38): user pid=3882 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189456463.423:39): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189456463.423:40): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189456463.450:41): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189456463.450:42): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189456463.450:43): user pid=3947 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189458061.189:44): user pid=4209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189460139.193:45): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189460139.193:46): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189460139.201:47): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189460440.337:48): user pid=4458 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189460451.858:49): user pid=4537 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189460487.101:50): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189460487.101:51): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189460487.102:52): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189460487.108:53): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189460487.108:54): user pid=4546 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189460489.427:55): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189460489.427:56): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189460489.463:57): user pid=4577 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189460727.396:58): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189460727.402:59): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189460727.403:60): user pid=4632 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189460729.207:61): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189460729.207:62): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189460729.211:63): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CHAUTHTOK msg=audit(1189460898.562:64): user pid=4682 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=jackuser exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189461183.668:65): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189461183.668:66): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189461183.724:67): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189461183.756:68): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189461183.756:69): user pid=14508 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189461454.250:70): user pid=4663 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189461533.805:71): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189461533.805:72): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189461533.855:73): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189461591.038:74): user pid=14670 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189461661.374:75): user pid=14738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189462577.052:76): user pid=14948 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189462577.052:77): user pid=14948 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189462685.983:78): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189462685.984:79): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189462686.045:80): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189462686.052:81): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189462686.052:82): user pid=15012 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1189462690.943:83): user pid=15043 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189462690.943:84): user pid=15043 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USYS_CONFIG msg=audit(1189462696.500:85): user pid=15302 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1189462812.892:9287): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1934 res=success, auditd pid=1934 >type=CONFIG_CHANGE msg=audit(1189462812.992:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189462812.992:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189462813.109:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189462813.109:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189462819.907:9): avc: denied { read write } for pid=2250 comm="modprobe" name="" dev=sockfs ino=9201 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189462819.907:9): avc: denied { read write } for pid=2250 comm="modprobe" name="" dev=sockfs ino=9215 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189462819.907:9): arch=40000003 syscall=11 success=yes exit=0 a0=936b710 a1=bf916de8 a2=bf91a220 a3=936b710 items=0 ppid=2211 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189462819.907:9): path="socket:[9215]" >type=AVC_PATH msg=audit(1189462819.907:9): path="socket:[9201]" >type=AVC msg=audit(1189462820.232:10): avc: denied { write } for pid=2049 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189462820.232:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8ba6d0 a2=63a494 a3=0 items=0 ppid=1 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ERR msg=audit(1189462833.812:11): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189462844.619:12): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2760 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189462847.608:13): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189462847.611:14): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189462847.612:15): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189462847.618:16): login pid=2981 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189462847.639:17): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189462847.641:18): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189462930.438:19): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1189462933.000:20): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189462933.000:21): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189462933.001:22): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189462933.010:23): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189462933.010:24): user pid=3471 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1189463166.682:25): user pid=4291 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189463166.682:26): user pid=4291 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1189463170.500:27): user pid=4517 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189463188.565:28): user pid=4840 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189463303.851:29): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189463303.851:30): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189463323.710:31): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2614 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189463329.280:32): avc: denied { read write } for pid=5588 comm="modprobe" name="" dev=sockfs ino=29128 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189463329.280:32): avc: denied { read write } for pid=5588 comm="modprobe" name="" dev=sockfs ino=29129 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189463329.280:32): arch=40000003 syscall=11 success=yes exit=0 a0=83a7530 a1=bfb950c8 a2=bfb979a0 a3=83a7530 items=0 ppid=5587 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189463329.280:32): path="socket:[29129]" >type=AVC_PATH msg=audit(1189463329.280:32): path="socket:[29128]" >type=ANOM_ABEND msg=audit(1189463330.573:33): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2015 comm="named" sig=6 >type=DAEMON_END msg=audit(1189463330.973:9288): auditd normal halt, sending auid=4294967295 pid=6029 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1934 >type=DAEMON_START msg=audit(1189463408.182:7792): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1905 res=success, auditd pid=1905 >type=CONFIG_CHANGE msg=audit(1189463408.281:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189463408.281:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189463408.622:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189463408.622:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189463414.356:9): avc: denied { read write } for pid=2118 comm="hid2hci" name="001" dev=tmpfs ino=5490 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189463414.356:9): arch=40000003 syscall=5 success=no exit=-13 a0=bfc0b03c a1=2 a2=1 a3=bfc0b03c items=0 ppid=2105 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189463414.356:10): avc: denied { read } for pid=2118 comm="hid2hci" name="001" dev=tmpfs ino=5490 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189463414.356:10): arch=40000003 syscall=5 success=no exit=-13 a0=bfc0b03c a1=0 a2=1 a3=bfc0b03c items=0 ppid=2105 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189463415.741:11): avc: denied { write } for pid=2020 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275159 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189463415.741:11): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa2c030 a2=63a494 a3=0 items=0 ppid=1 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189463416.015:12): avc: denied { read write } for pid=2223 comm="modprobe" name="" dev=sockfs ino=9172 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189463416.015:12): avc: denied { read write } for pid=2223 comm="modprobe" name="" dev=sockfs ino=9182 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189463416.015:12): arch=40000003 syscall=11 success=yes exit=0 a0=87bf710 a1=bf9a6368 a2=bf9a97a0 a3=87bf710 items=0 ppid=2183 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189463416.015:12): path="socket:[9182]" >type=AVC_PATH msg=audit(1189463416.015:12): path="socket:[9172]" >type=USER_ERR msg=audit(1189463431.314:13): user pid=2851 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189463433.995:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2721 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189463445.082:15): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189463445.086:16): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189463445.086:17): user pid=2957 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189463445.089:18): login pid=2957 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189463445.098:19): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189463445.099:20): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189463522.517:21): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189463522.517:22): user pid=3360 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1189463526.500:23): user pid=3592 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189463540.098:24): user pid=3911 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189463574.462:25): user pid=4048 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189463574.462:26): user pid=4048 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189463598.735:27): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189463601.865:28): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189463601.865:29): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189463601.866:30): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189463601.873:31): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189463601.873:32): user pid=4051 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189463809.105:33): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189463809.106:34): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189463809.183:35): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189463809.193:36): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189463809.193:37): user pid=4496 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189464419.162:38): user pid=4679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189464419.162:39): user pid=4679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189464426.238:40): user pid=4681 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189464426.238:41): user pid=4681 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USYS_CONFIG msg=audit(1189464430.500:42): user pid=4891 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189486312.313:43): user pid=5243 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189486339.509:44): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189486339.509:45): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189486339.511:46): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189486339.518:47): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189486339.518:48): user pid=5403 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189486861.632:49): user pid=5526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189487082.538:50): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189487082.538:51): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189487082.540:52): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189487082.548:53): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189487082.548:54): user pid=5620 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189487242.099:55): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189487242.107:56): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189487242.107:57): user pid=5717 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189490461.706:58): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189492720.002:59): user pid=8435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189492724.085:60): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189492724.086:61): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189492724.086:62): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189492724.089:63): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189492724.089:64): user pid=8436 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189492729.326:65): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189492729.328:66): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189492729.328:67): user pid=8437 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189492762.540:68): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189492762.540:69): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189492762.540:70): user pid=8442 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189492764.179:71): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189492764.180:72): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189492764.180:73): user pid=8443 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189492804.599:74): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189492804.601:75): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189492804.601:76): user pid=8446 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189493731.093:77): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189493731.093:78): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189493731.094:79): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189493731.102:80): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189493731.103:81): user pid=8607 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189494061.754:82): user pid=8721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189494186.550:83): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189494186.551:84): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189494186.552:85): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189494186.561:86): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189494186.561:87): user pid=8732 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189497444.694:88): user pid=9261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189497444.694:89): user pid=9261 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USYS_CONFIG msg=audit(1189497449.499:90): user pid=9393 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189498811.200:91): user pid=9545 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189500407.410:92): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189500407.410:93): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189500407.447:94): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189500407.454:95): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189500407.454:96): user pid=9949 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1189500451.172:97): avc: denied { getattr } for pid=10002 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=6044382 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500451.172:97): arch=40000003 syscall=195 success=no exit=-13 a0=bf9c64a8 a1=bf9c5394 a2=816ff4 a3=d items=0 ppid=10001 pid=10002 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500451.172:97): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500451.174:98): avc: denied { getattr } for pid=10002 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=6044382 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500451.174:98): arch=40000003 syscall=195 success=no exit=-13 a0=8e7b1d0 a1=bf9c825c a2=816ff4 a3=4 items=0 ppid=10001 pid=10002 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500451.174:98): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500579.268:99): avc: denied { getattr } for pid=10090 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500579.268:99): arch=40000003 syscall=195 success=no exit=-13 a0=bf9a2b08 a1=bf9a19f4 a2=816ff4 a3=d items=0 ppid=10089 pid=10090 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500579.268:99): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500579.309:100): avc: denied { getattr } for pid=10092 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500579.309:100): arch=40000003 syscall=195 success=no exit=-13 a0=9bd9090 a1=bfa3954c a2=816ff4 a3=1 items=0 ppid=10091 pid=10092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500579.309:100): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500579.309:101): avc: denied { getattr } for pid=10092 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500579.309:101): arch=40000003 syscall=195 success=no exit=-13 a0=9bd9090 a1=bfa3954c a2=816ff4 a3=4 items=0 ppid=10091 pid=10092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500579.309:101): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500579.462:102): avc: denied { getattr } for pid=10090 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500579.462:102): arch=40000003 syscall=195 success=no exit=-13 a0=a0075d8 a1=bf9a48bc a2=816ff4 a3=4 items=0 ppid=10089 pid=10090 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500579.462:102): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500681.549:103): avc: denied { getattr } for pid=10187 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500681.549:103): arch=40000003 syscall=195 success=no exit=-13 a0=bfa8f3e8 a1=bfa8e2d4 a2=816ff4 a3=d items=0 ppid=10186 pid=10187 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500681.549:103): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500681.627:104): avc: denied { getattr } for pid=10189 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500681.627:104): arch=40000003 syscall=195 success=no exit=-13 a0=9b1c090 a1=bff77a8c a2=816ff4 a3=1 items=0 ppid=10188 pid=10189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500681.627:104): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500681.627:105): avc: denied { getattr } for pid=10189 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500681.627:105): arch=40000003 syscall=195 success=no exit=-13 a0=9b1c090 a1=bff77a8c a2=816ff4 a3=4 items=0 ppid=10188 pid=10189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500681.627:105): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500681.783:106): avc: denied { getattr } for pid=10187 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850718 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500681.783:106): arch=40000003 syscall=195 success=no exit=-13 a0=9dbd5d8 a1=bfa9119c a2=816ff4 a3=4 items=0 ppid=10186 pid=10187 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500681.783:106): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500744.292:107): avc: denied { getattr } for pid=10278 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500744.292:107): arch=40000003 syscall=195 success=no exit=-13 a0=bfda7708 a1=bfda65f4 a2=816ff4 a3=d items=0 ppid=10277 pid=10278 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500744.292:107): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500744.330:108): avc: denied { getattr } for pid=10280 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500744.330:108): arch=40000003 syscall=195 success=no exit=-13 a0=85b7090 a1=bfbb9ecc a2=816ff4 a3=1 items=0 ppid=10279 pid=10280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500744.330:108): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500744.330:109): avc: denied { getattr } for pid=10280 comm="hald-generate-f" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500744.330:109): arch=40000003 syscall=195 success=no exit=-13 a0=85b7090 a1=bfbb9ecc a2=816ff4 a3=4 items=0 ppid=10279 pid=10280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hald-generate-f" exe="/usr/libexec/hald-generate-fdi-cache" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500744.330:109): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189500744.448:110): avc: denied { getattr } for pid=10278 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189500744.448:110): arch=40000003 syscall=195 success=no exit=-13 a0=8adf5d8 a1=bfda94bc a2=816ff4 a3=4 items=0 ppid=10277 pid=10278 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189500744.448:110): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_AUTH msg=audit(1189501137.753:111): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189501137.753:112): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189501137.795:113): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189501163.639:114): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=10306 comm="hald-addon-acpi" sig=11 >type=USER_ACCT msg=audit(1189501261.614:115): user pid=10447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189501303.128:116): user pid=10426 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189501413.487:117): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189501413.488:118): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189501413.489:119): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189501413.496:120): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189501413.496:121): user pid=10476 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1189503536.904:122): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189503536.904:123): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189503536.905:124): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189503536.910:125): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189503536.910:126): user pid=10956 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189503544.648:127): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189503544.650:128): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189503544.650:129): user pid=10957 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1189503547.723:130): avc: denied { getattr } for pid=10974 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189503547.723:130): arch=40000003 syscall=195 success=no exit=-13 a0=bf8ff738 a1=bf8fe624 a2=816ff4 a3=d items=0 ppid=10973 pid=10974 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189503547.723:130): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189503547.725:131): avc: denied { getattr } for pid=10974 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189503547.725:131): arch=40000003 syscall=195 success=no exit=-13 a0=a00f1d0 a1=bf9014ec a2=816ff4 a3=4 items=0 ppid=10973 pid=10974 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189503547.725:131): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_AUTH msg=audit(1189504325.302:132): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189504325.303:133): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189504325.304:134): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189504325.307:135): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189504325.307:136): user pid=11108 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189504327.788:137): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189504327.789:138): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189504327.789:139): user pid=11109 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1189504330.896:140): avc: denied { getattr } for pid=11126 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189504330.896:140): arch=40000003 syscall=195 success=no exit=-13 a0=bfe88fe8 a1=bfe87ed4 a2=816ff4 a3=d items=0 ppid=11125 pid=11126 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189504330.896:140): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189504330.898:141): avc: denied { getattr } for pid=11126 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189504330.898:141): arch=40000003 syscall=195 success=no exit=-13 a0=8b501d0 a1=bfe8ad9c a2=816ff4 a3=4 items=0 ppid=11125 pid=11126 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189504330.898:141): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=CRED_ACQ msg=audit(1189504437.822:142): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189504437.823:143): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189504437.824:144): user pid=11200 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189504440.354:145): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189504440.356:146): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189504440.356:147): user pid=11201 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1189504443.433:148): avc: denied { getattr } for pid=11218 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189504443.433:148): arch=40000003 syscall=195 success=no exit=-13 a0=bfd0b668 a1=bfd0a554 a2=816ff4 a3=d items=0 ppid=11217 pid=11218 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189504443.433:148): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189504443.435:149): avc: denied { getattr } for pid=11218 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189504443.435:149): arch=40000003 syscall=195 success=no exit=-13 a0=94871d0 a1=bfd0d41c a2=816ff4 a3=4 items=0 ppid=11217 pid=11218 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189504443.435:149): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_ACCT msg=audit(1189504861.702:150): user pid=17587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189504893.491:151): user pid=17592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189504893.491:152): user pid=17592 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1189504948.823:153): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189504948.823:154): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189504948.824:155): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189504948.834:156): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189504948.834:157): user pid=17593 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_ABEND msg=audit(1189505782.349:158): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=11245 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189507146.419:159): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189507146.419:160): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189507146.420:161): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189507146.427:162): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189507146.427:163): user pid=30854 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189507155.523:164): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189507155.523:164): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189507167.505:165): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189507173.117:166): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189507173.117:166): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189507981.719:167): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189507981.719:168): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189507981.994:169): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189508461.826:170): user pid=31307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1189511599.138:171): user pid=31233 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189512061.855:172): user pid=31718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1189514686.115:173): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=30965 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189514742.857:174): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189514742.857:175): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189514742.972:176): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189514742.985:177): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189514742.985:178): user pid=4056 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189514755.306:179): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189514755.307:180): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189514755.307:181): user pid=4057 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189514755.544:182): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189515146.638:183): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189515146.639:184): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189515146.639:185): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189515146.641:186): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189515146.641:187): user pid=4243 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189515165.569:188): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189515165.571:189): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189515165.571:190): user pid=4250 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1189515169.360:191): avc: denied { getattr } for pid=4267 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189515169.360:191): arch=40000003 syscall=195 success=no exit=-13 a0=bfdbaf18 a1=bfdb9e04 a2=816ff4 a3=d items=0 ppid=4266 pid=4267 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189515169.360:191): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189515169.442:192): avc: denied { getattr } for pid=4267 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189515169.442:192): arch=40000003 syscall=195 success=no exit=-13 a0=8e8b1d0 a1=bfdbcccc a2=816ff4 a3=4 items=0 ppid=4266 pid=4267 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189515169.442:192): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=CRED_ACQ msg=audit(1189515191.198:193): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189515191.205:194): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189515191.205:195): user pid=4327 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189515661.816:196): user pid=4551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1189515889.713:197): avc: denied { getattr } for pid=4596 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189515889.713:197): arch=40000003 syscall=195 success=no exit=-13 a0=bf935288 a1=bf934174 a2=816ff4 a3=d items=0 ppid=4595 pid=4596 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189515889.713:197): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189515889.715:198): avc: denied { getattr } for pid=4596 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=user_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189515889.715:198): arch=40000003 syscall=195 success=no exit=-13 a0=86f31d0 a1=bf93703c a2=816ff4 a3=4 items=0 ppid=4595 pid=4596 auid=500 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=user_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189515889.715:198): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=ANOM_ABEND msg=audit(1189516126.067:199): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=4623 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189517303.444:200): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189517303.444:201): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189517303.446:202): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189517303.451:203): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189517303.451:204): user pid=4841 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189517896.323:205): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189517896.323:206): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189517896.352:207): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189517896.355:208): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189517896.355:209): user pid=5142 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1189518499.379:210): auid=500 uid=68 gid=68 subj=user_u:system_r:unconfined_t:s0 pid=5126 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189518665.660:211): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189518665.660:212): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189518665.661:213): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189518665.667:214): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189518665.667:215): user pid=5372 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1189518839.602:216): avc: denied { sendto } for pid=5425 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518839.602:216): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=5425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1189518865.697:217): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189518865.697:218): user pid=2957 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1189518870.341:219): avc: denied { sendto } for pid=5453 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189518870.341:220): avc: denied { sendto } for pid=5454 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518870.341:220): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189518870.341:219): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518871.621:221): avc: denied { sendto } for pid=5456 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189518871.621:222): avc: denied { sendto } for pid=5457 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518871.621:221): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189518871.621:222): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518871.724:223): avc: denied { sendto } for pid=5461 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518871.724:223): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518871.725:224): avc: denied { sendto } for pid=5462 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518871.725:224): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518871.731:225): avc: denied { sendto } for pid=5465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518871.731:225): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518871.731:226): avc: denied { sendto } for pid=5466 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518871.731:226): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518907.848:227): avc: denied { sendto } for pid=5491 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518907.848:227): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518907.848:228): avc: denied { sendto } for pid=5490 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518907.848:228): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518908.910:229): avc: denied { sendto } for pid=5494 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518908.910:229): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518908.911:230): avc: denied { sendto } for pid=5495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518908.911:230): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518909.011:231): avc: denied { sendto } for pid=5499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518909.011:231): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518909.013:232): avc: denied { sendto } for pid=5501 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518909.013:232): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=5501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518909.017:233): avc: denied { sendto } for pid=5500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518909.017:233): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=5500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189518909.018:234): avc: denied { sendto } for pid=5502 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189518909.018:234): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1189518929.640:235): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: authentication acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1189518929.640:236): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1189518929.646:237): login pid=2845 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1189518929.820:238): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=root:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=root:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1189518929.887:239): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1189518929.887:240): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1189518929.889:241): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1189518946.295:242): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1189518946.296:243): user pid=2845 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1189518957.771:244): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189518957.775:245): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189518957.776:246): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189518957.780:247): login pid=5492 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189518957.828:248): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189518957.828:249): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=AVC msg=audit(1189519034.111:250): avc: denied { sendto } for pid=5955 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189519034.111:250): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=84 items=0 ppid=599 pid=5955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1189519261.940:251): user pid=6023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189520000.673:252): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189520000.673:253): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189520000.719:254): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189520000.739:255): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189520000.739:256): user pid=18519 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=MAC_POLICY_LOAD msg=audit(1189520024.123:257): policy loaded auid=500 >type=SYSCALL msg=audit(1189520024.123:257): arch=40000003 syscall=4 success=yes exit=1587243 a0=4 a1=b7dbc000 a2=18382b a3=bfefac68 items=0 ppid=18528 pid=18529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1189520024.433:258): user pid=2100 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1189520792.761:259): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189520792.761:260): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189520792.762:261): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189520792.768:262): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189520792.768:263): user pid=18814 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189520798.983:264): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189520798.983:264): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=AVC msg=audit(1189520799.573:265): avc: denied { sendto } for pid=18847 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189520799.573:265): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189520815.821:266): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=AVC msg=audit(1189520819.513:267): avc: denied { sendto } for pid=18873 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189520819.513:267): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=18873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189520976.698:268): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189520976.698:268): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=AVC msg=audit(1189520977.333:269): avc: denied { sendto } for pid=18894 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189520977.333:269): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189520980.742:270): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=AVC msg=audit(1189520981.444:271): avc: denied { sendto } for pid=18919 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189520981.444:271): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=18919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189521084.856:272): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189521084.856:272): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=AVC msg=audit(1189521085.063:273): avc: denied { sendto } for pid=18940 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189521085.063:273): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=18940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1189522715.799:274): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=19013 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189522776.186:275): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189522776.186:276): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189522776.240:277): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189522776.264:278): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189522776.264:279): user pid=19639 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189522820.703:280): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=AVC msg=audit(1189522821.430:281): avc: denied { sendto } for pid=19679 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189522821.430:281): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=19679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1189522862.141:282): user pid=19721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189524747.084:283): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189524747.084:284): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189524747.085:285): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189524747.089:286): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189524747.089:287): user pid=20967 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189526009.816:288): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189526009.817:289): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189526009.817:290): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189526009.819:291): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189526009.820:292): user pid=21583 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189526193.465:293): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189526193.465:294): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189526193.466:295): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189526193.475:296): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189526193.475:297): user pid=21719 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189526461.270:298): user pid=21797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189527185.804:299): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189527185.804:299): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb89478 a3=6 items=0 ppid=1 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=AVC msg=audit(1189527186.168:300): avc: denied { sendto } for pid=21940 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189527186.168:300): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=21940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1189528763.044:301): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=21969 comm="virt-viewer" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1189528892.271:302): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=AVC msg=audit(1189528893.188:303): avc: denied { sendto } for pid=22116 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189528893.188:303): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189528893.226:304): avc: denied { sendto } for pid=22080 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189528893.226:304): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=22080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189528894.377:305): avc: denied { sendto } for pid=22141 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189528894.377:305): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=22141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189529225.224:306): dev=vnet0 prom=256 old_prom=0 auid=500 >type=SYSCALL msg=audit(1189529225.224:306): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf8b9e88 a3=6 items=0 ppid=1 pid=22138 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=user_u:system_r:initrc_t:s0 key=(null) >type=AVC msg=audit(1189529225.530:307): avc: denied { sendto } for pid=22209 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189529225.530:307): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=22209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1189530062.062:308): user pid=22309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189530260.751:309): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189530260.751:310): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189530260.822:311): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189530260.823:312): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189530260.823:313): user pid=22335 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189530262.189:314): user pid=22336 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189530262.189:315): user pid=22336 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1189530265.717:316): avc: denied { sendto } for pid=22338 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530265.717:317): avc: denied { sendto } for pid=22345 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.717:316): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530265.717:317): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.717:318): avc: denied { sendto } for pid=22342 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.717:318): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.717:319): avc: denied { sendto } for pid=22346 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.717:319): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.718:320): avc: denied { sendto } for pid=22339 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.718:320): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.718:321): avc: denied { sendto } for pid=22341 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530265.718:322): avc: denied { sendto } for pid=22343 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.718:321): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530265.718:322): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.718:323): avc: denied { sendto } for pid=22340 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530265.718:324): avc: denied { sendto } for pid=22347 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.718:323): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530265.718:324): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530265.718:325): avc: denied { sendto } for pid=22344 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530265.718:325): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1189530274.855:326): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189530274.855:327): user pid=5492 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189530277.127:328): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2585 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189530277.830:329): avc: denied { sendto } for pid=22420 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530277.830:330): avc: denied { sendto } for pid=22421 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530277.830:329): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530277.830:330): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530278.753:331): avc: denied { sendto } for pid=22428 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530278.753:331): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8a items=0 ppid=599 pid=22428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.585:332): avc: denied { sendto } for pid=22440 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530281.585:333): avc: denied { sendto } for pid=22439 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.585:332): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530281.585:333): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.588:334): avc: denied { sendto } for pid=22451 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.588:334): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.590:335): avc: denied { sendto } for pid=22450 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.590:335): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.593:336): avc: denied { sendto } for pid=22452 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.593:336): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.594:337): avc: denied { sendto } for pid=22456 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.594:337): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.596:338): avc: denied { sendto } for pid=22455 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.596:338): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.597:339): avc: denied { sendto } for pid=22458 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.597:339): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.600:340): avc: denied { sendto } for pid=22457 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.600:340): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.601:341): avc: denied { sendto } for pid=22460 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.601:341): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.602:342): avc: denied { sendto } for pid=22459 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.602:342): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.603:343): avc: denied { sendto } for pid=22462 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.603:343): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.605:344): avc: denied { sendto } for pid=22461 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.605:344): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.607:345): avc: denied { sendto } for pid=22464 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.607:345): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.608:346): avc: denied { sendto } for pid=22463 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.608:346): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.609:347): avc: denied { sendto } for pid=22465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.609:347): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.707:348): avc: denied { sendto } for pid=22471 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.707:348): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.708:349): avc: denied { sendto } for pid=22474 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.708:349): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.709:350): avc: denied { sendto } for pid=22470 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.709:350): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.709:351): avc: denied { sendto } for pid=22475 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.709:351): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.714:352): avc: denied { sendto } for pid=22480 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.714:352): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.715:353): avc: denied { sendto } for pid=22481 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.715:353): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189530281.805:354): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=AVC msg=audit(1189530281.815:355): avc: denied { sendto } for pid=22494 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.815:355): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.817:356): avc: denied { sendto } for pid=22496 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.817:356): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.820:357): avc: denied { sendto } for pid=22495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.820:357): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.820:358): avc: denied { sendto } for pid=22498 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.820:358): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.822:359): avc: denied { sendto } for pid=22497 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.822:359): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.822:360): avc: denied { sendto } for pid=22499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.822:360): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.823:361): avc: denied { sendto } for pid=22500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.823:361): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.823:362): avc: denied { sendto } for pid=22501 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.823:362): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.825:363): avc: denied { sendto } for pid=22502 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.825:363): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530281.826:364): avc: denied { sendto } for pid=22503 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530281.826:364): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.007:365): avc: denied { sendto } for pid=22488 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.007:365): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8d items=0 ppid=599 pid=22488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.332:366): avc: denied { sendto } for pid=22533 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.332:366): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=90 items=0 ppid=599 pid=22533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.916:367): avc: denied { sendto } for pid=22552 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.916:367): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.917:368): avc: denied { sendto } for pid=22553 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.917:368): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.919:369): avc: denied { sendto } for pid=22558 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.919:369): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.921:370): avc: denied { sendto } for pid=22556 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.921:370): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.929:371): avc: denied { sendto } for pid=22563 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.929:371): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.930:372): avc: denied { sendto } for pid=22562 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530282.930:373): avc: denied { sendto } for pid=22565 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.930:373): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530282.930:372): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.930:374): avc: denied { sendto } for pid=22567 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.930:374): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.932:375): avc: denied { sendto } for pid=22566 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.932:375): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.933:376): avc: denied { sendto } for pid=22569 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.933:376): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.933:377): avc: denied { sendto } for pid=22568 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.933:377): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.933:378): avc: denied { sendto } for pid=22570 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.933:378): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.938:379): avc: denied { sendto } for pid=22572 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.938:379): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530282.939:380): avc: denied { sendto } for pid=22574 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530282.939:380): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.040:381): avc: denied { sendto } for pid=22580 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.040:381): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.041:382): avc: denied { sendto } for pid=22581 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.041:382): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.110:383): avc: denied { sendto } for pid=22587 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.110:383): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.110:384): avc: denied { sendto } for pid=22586 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.110:384): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.113:385): avc: denied { sendto } for pid=22591 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.113:385): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.114:386): avc: denied { sendto } for pid=22590 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.114:386): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.128:387): avc: denied { sendto } for pid=22596 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.128:387): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.129:388): avc: denied { sendto } for pid=22601 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.129:388): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.131:389): avc: denied { sendto } for pid=22597 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.131:389): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.131:390): avc: denied { sendto } for pid=22603 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.131:390): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.133:391): avc: denied { sendto } for pid=22602 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.133:391): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.134:392): avc: denied { sendto } for pid=22604 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.134:392): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.135:393): avc: denied { sendto } for pid=22606 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.135:393): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.137:394): avc: denied { sendto } for pid=22607 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.137:394): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.138:395): avc: denied { sendto } for pid=22608 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.138:395): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.235:396): avc: denied { sendto } for pid=22610 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.235:396): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.241:397): avc: denied { sendto } for pid=22611 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.241:397): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.243:398): avc: denied { sendto } for pid=22612 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.243:398): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.339:399): avc: denied { sendto } for pid=22617 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.339:399): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.340:400): avc: denied { sendto } for pid=22621 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.340:400): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.341:401): avc: denied { sendto } for pid=22618 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.341:401): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.341:402): avc: denied { sendto } for pid=22624 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.341:402): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.348:403): avc: denied { sendto } for pid=22627 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.348:403): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.349:404): avc: denied { sendto } for pid=22632 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.349:404): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.353:405): avc: denied { sendto } for pid=22628 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.353:405): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.356:406): avc: denied { sendto } for pid=22634 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.356:406): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.358:407): avc: denied { sendto } for pid=22633 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.358:407): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.360:408): avc: denied { sendto } for pid=22635 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.360:408): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.361:409): avc: denied { sendto } for pid=22637 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.361:409): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.365:410): avc: denied { sendto } for pid=22638 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.365:410): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.366:411): avc: denied { sendto } for pid=22639 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.366:411): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.461:412): avc: denied { sendto } for pid=22643 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.461:412): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.466:413): avc: denied { sendto } for pid=22644 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.466:413): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.468:414): avc: denied { sendto } for pid=22645 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.468:414): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.511:415): avc: denied { sendto } for pid=22647 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.511:415): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.513:416): avc: denied { sendto } for pid=22648 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.513:416): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.517:417): avc: denied { sendto } for pid=22650 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.517:417): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.523:418): avc: denied { sendto } for pid=22652 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.523:418): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.619:419): avc: denied { sendto } for pid=22664 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.619:419): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.625:420): avc: denied { sendto } for pid=22666 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.625:420): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.626:421): avc: denied { sendto } for pid=22667 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.626:421): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.627:422): avc: denied { sendto } for pid=22668 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.627:422): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.632:423): avc: denied { sendto } for pid=22669 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.632:423): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.633:424): avc: denied { sendto } for pid=22670 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.633:424): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.634:425): avc: denied { sendto } for pid=22671 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.634:425): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.635:426): avc: denied { sendto } for pid=22672 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.635:426): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.639:427): avc: denied { sendto } for pid=22673 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.639:427): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.640:428): avc: denied { sendto } for pid=22674 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.640:428): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.642:429): avc: denied { sendto } for pid=22677 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.642:429): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.643:430): avc: denied { sendto } for pid=22676 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.643:430): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.647:431): avc: denied { sendto } for pid=22678 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.647:431): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530283.648:432): avc: denied { sendto } for pid=22679 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530283.648:432): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.769:433): avc: denied { sendto } for pid=22685 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.769:433): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.769:434): avc: denied { sendto } for pid=22686 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.769:434): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.770:435): avc: denied { sendto } for pid=22688 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.770:435): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.770:436): avc: denied { sendto } for pid=22687 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.770:436): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.781:437): avc: denied { sendto } for pid=22696 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.781:437): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.782:438): avc: denied { sendto } for pid=22695 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.782:438): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.783:439): avc: denied { sendto } for pid=22701 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.783:439): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.785:440): avc: denied { sendto } for pid=22700 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.785:440): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.786:441): avc: denied { sendto } for pid=22702 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.786:441): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.788:442): avc: denied { sendto } for pid=22703 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.788:442): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.789:443): avc: denied { sendto } for pid=22705 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.789:443): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.791:444): avc: denied { sendto } for pid=22706 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.791:444): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.792:445): avc: denied { sendto } for pid=22707 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.792:445): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.888:446): avc: denied { sendto } for pid=22709 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.888:446): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.894:447): avc: denied { sendto } for pid=22710 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.894:447): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530284.896:448): avc: denied { sendto } for pid=22711 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530284.896:448): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.230:449): avc: denied { sendto } for pid=22771 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.230:449): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.232:450): avc: denied { sendto } for pid=22775 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.232:450): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.235:451): avc: denied { sendto } for pid=22772 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.235:451): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.237:452): avc: denied { sendto } for pid=22778 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.237:452): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.267:453): avc: denied { sendto } for pid=22781 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.267:453): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.269:454): avc: denied { sendto } for pid=22782 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.269:454): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.270:455): avc: denied { sendto } for pid=22785 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530285.271:456): avc: denied { sendto } for pid=22784 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.271:456): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530285.270:455): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.277:457): avc: denied { sendto } for pid=22786 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.277:457): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.278:458): avc: denied { sendto } for pid=22787 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.278:458): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.280:459): avc: denied { sendto } for pid=22788 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.280:459): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.280:460): avc: denied { sendto } for pid=22789 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.280:460): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.444:461): avc: denied { sendto } for pid=22795 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.444:461): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.445:462): avc: denied { sendto } for pid=22796 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.445:462): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.448:463): avc: denied { sendto } for pid=22800 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.448:463): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.449:464): avc: denied { sendto } for pid=22799 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.449:464): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.464:465): avc: denied { sendto } for pid=22806 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.464:465): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.466:466): avc: denied { sendto } for pid=22805 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.466:466): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.466:467): avc: denied { sendto } for pid=22810 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.466:467): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.467:468): avc: denied { sendto } for pid=22811 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.467:468): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.470:469): avc: denied { sendto } for pid=22813 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.470:469): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.471:470): avc: denied { sendto } for pid=22812 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.471:470): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.573:471): avc: denied { sendto } for pid=22821 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.573:471): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.573:472): avc: denied { sendto } for pid=22822 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.573:472): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.578:473): avc: denied { sendto } for pid=22823 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.578:473): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.580:474): avc: denied { sendto } for pid=22825 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.580:474): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.582:475): avc: denied { sendto } for pid=22824 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.582:475): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530285.583:476): avc: denied { sendto } for pid=22826 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530285.583:476): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.642:477): avc: denied { sendto } for pid=22834 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.642:477): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.643:478): avc: denied { sendto } for pid=22833 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.643:478): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.645:479): avc: denied { sendto } for pid=22837 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.645:479): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.646:480): avc: denied { sendto } for pid=22839 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.646:480): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.653:481): avc: denied { sendto } for pid=22843 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530286.653:482): avc: denied { sendto } for pid=22844 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.653:481): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530286.653:482): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.654:483): avc: denied { sendto } for pid=22848 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.654:483): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.655:484): avc: denied { sendto } for pid=22849 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.655:484): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.657:485): avc: denied { sendto } for pid=22850 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.657:485): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.657:486): avc: denied { sendto } for pid=22851 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.657:486): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.760:487): avc: denied { sendto } for pid=22861 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.760:487): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.761:488): avc: denied { sendto } for pid=22860 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.761:488): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.767:489): avc: denied { sendto } for pid=22863 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530286.767:490): avc: denied { sendto } for pid=22862 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.767:490): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530286.767:489): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.770:491): avc: denied { sendto } for pid=22865 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.770:491): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.771:492): avc: denied { sendto } for pid=22864 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.771:492): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.812:493): avc: denied { sendto } for pid=22869 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.812:493): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.812:494): avc: denied { sendto } for pid=22868 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.812:494): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.815:495): avc: denied { sendto } for pid=22873 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.815:495): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.816:496): avc: denied { sendto } for pid=22872 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.816:496): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.827:497): avc: denied { sendto } for pid=22879 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.827:497): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.828:498): avc: denied { sendto } for pid=22881 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.828:498): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.830:499): avc: denied { sendto } for pid=22878 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.830:499): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.830:500): avc: denied { sendto } for pid=22885 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.830:500): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.833:501): avc: denied { sendto } for pid=22882 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.833:501): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.834:502): avc: denied { sendto } for pid=22887 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.834:502): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.835:503): avc: denied { sendto } for pid=22886 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.835:503): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.836:504): avc: denied { sendto } for pid=22888 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.836:504): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.938:505): avc: denied { sendto } for pid=22893 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.938:505): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.938:506): avc: denied { sendto } for pid=22894 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.938:506): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.943:507): avc: denied { sendto } for pid=22895 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.943:507): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530286.945:508): avc: denied { sendto } for pid=22896 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530286.945:508): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.064:509): avc: denied { sendto } for pid=22901 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.064:509): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.065:510): avc: denied { sendto } for pid=22902 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.065:510): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.066:511): avc: denied { sendto } for pid=22905 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.066:511): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.067:512): avc: denied { sendto } for pid=22906 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.067:512): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.073:513): avc: denied { sendto } for pid=22912 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.073:513): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.073:514): avc: denied { sendto } for pid=22911 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.073:514): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.074:515): avc: denied { sendto } for pid=22914 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.074:515): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.074:516): avc: denied { sendto } for pid=22915 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.074:516): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.078:517): avc: denied { sendto } for pid=22918 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.078:517): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.079:518): avc: denied { sendto } for pid=22916 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.079:518): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.181:519): avc: denied { sendto } for pid=22924 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.181:519): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.182:520): avc: denied { sendto } for pid=22925 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.182:520): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.186:521): avc: denied { sendto } for pid=22926 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.186:521): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.186:522): avc: denied { sendto } for pid=22927 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.186:522): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.187:523): avc: denied { sendto } for pid=22928 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.187:523): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.188:524): avc: denied { sendto } for pid=22929 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.188:524): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.245:525): avc: denied { sendto } for pid=22934 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530287.246:526): avc: denied { sendto } for pid=22935 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.246:526): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.248:527): avc: denied { sendto } for pid=22938 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.248:527): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530287.245:525): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.250:528): avc: denied { sendto } for pid=22941 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.250:528): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.260:529): avc: denied { sendto } for pid=22945 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.260:529): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.262:530): avc: denied { sendto } for pid=22947 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.262:530): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.266:531): avc: denied { sendto } for pid=22944 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.266:531): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.266:532): avc: denied { sendto } for pid=22948 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.266:532): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.267:533): avc: denied { sendto } for pid=22949 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.267:533): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.268:534): avc: denied { sendto } for pid=22951 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.268:534): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.272:535): avc: denied { sendto } for pid=22952 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.272:535): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.273:536): avc: denied { sendto } for pid=22954 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.273:536): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.375:537): avc: denied { sendto } for pid=22960 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.375:537): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.375:538): avc: denied { sendto } for pid=22961 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.375:538): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.380:539): avc: denied { sendto } for pid=22962 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.380:539): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.382:540): avc: denied { sendto } for pid=22963 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.382:540): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.466:541): avc: denied { sendto } for pid=22968 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.466:541): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.471:542): avc: denied { sendto } for pid=22973 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.471:542): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.473:543): avc: denied { sendto } for pid=22969 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.473:543): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.475:544): avc: denied { sendto } for pid=22974 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.475:544): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.486:545): avc: denied { sendto } for pid=22979 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.486:545): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.488:546): avc: denied { sendto } for pid=22980 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.488:546): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.490:547): avc: denied { sendto } for pid=22986 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.490:547): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.490:548): avc: denied { sendto } for pid=22985 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.490:548): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=22985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.494:549): avc: denied { sendto } for pid=22987 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.494:549): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=22987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.494:550): avc: denied { sendto } for pid=22988 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.494:550): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=22988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.596:551): avc: denied { sendto } for pid=22999 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.596:551): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=22999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.596:552): avc: denied { sendto } for pid=23000 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.596:552): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.602:553): avc: denied { sendto } for pid=23001 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.602:553): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.603:554): avc: denied { sendto } for pid=23002 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.603:554): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.604:555): avc: denied { sendto } for pid=23003 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.604:555): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530287.605:556): avc: denied { sendto } for pid=23004 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530287.605:556): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.696:557): avc: denied { sendto } for pid=23018 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530290.696:558): avc: denied { sendto } for pid=23017 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.696:557): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530290.696:558): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.699:559): avc: denied { sendto } for pid=23021 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.699:559): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.700:560): avc: denied { sendto } for pid=23022 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.700:560): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.710:561): avc: denied { sendto } for pid=23027 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.710:561): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.712:562): avc: denied { sendto } for pid=23032 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.712:562): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.712:563): avc: denied { sendto } for pid=23028 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.712:563): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.714:564): avc: denied { sendto } for pid=23034 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.714:564): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.716:565): avc: denied { sendto } for pid=23033 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.716:565): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.717:566): avc: denied { sendto } for pid=23035 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.717:566): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.718:567): avc: denied { sendto } for pid=23037 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.718:567): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.720:568): avc: denied { sendto } for pid=23038 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.720:568): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.721:569): avc: denied { sendto } for pid=23039 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.721:569): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.818:570): avc: denied { sendto } for pid=23045 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.818:570): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.823:571): avc: denied { sendto } for pid=23046 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.823:571): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.825:572): avc: denied { sendto } for pid=23047 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530290.825:572): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530290.833:573): avc: denied { read write } for pid=23048 comm="modprobe" name="" dev=sockfs ino=1188537 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189530290.833:573): avc: denied { read write } for pid=23048 comm="modprobe" name="" dev=sockfs ino=1188559 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189530290.833:573): arch=40000003 syscall=11 success=yes exit=0 a0=915f530 a1=bf9ab6e8 a2=bf9adfc0 a3=915f530 items=0 ppid=23044 pid=23048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189530290.833:573): path="socket:[1188559]" >type=AVC_PATH msg=audit(1189530290.833:573): path="socket:[1188537]" >type=AVC msg=audit(1189530291.199:574): avc: denied { sendto } for pid=23080 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.199:574): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=81 items=0 ppid=599 pid=23080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.237:575): avc: denied { sendto } for pid=23091 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.237:575): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7b items=0 ppid=599 pid=23091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.238:576): avc: denied { sendto } for pid=23096 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.238:576): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.306:577): avc: denied { sendto } for pid=23118 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.306:577): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=79 items=0 ppid=599 pid=23118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.434:578): avc: denied { sendto } for pid=23153 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.434:578): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=73 items=0 ppid=599 pid=23153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.464:579): avc: denied { sendto } for pid=23164 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.464:579): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=75 items=0 ppid=599 pid=23164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.487:580): avc: denied { sendto } for pid=23175 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.487:580): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7d items=0 ppid=599 pid=23175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.497:581): avc: denied { sendto } for pid=23188 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.497:581): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=81 items=0 ppid=599 pid=23188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.503:582): avc: denied { sendto } for pid=23191 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.503:582): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=71 items=0 ppid=599 pid=23191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.536:583): avc: denied { sendto } for pid=23208 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.536:583): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=93 items=0 ppid=599 pid=23208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.589:584): avc: denied { sendto } for pid=23221 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.589:584): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=87 items=0 ppid=599 pid=23221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.601:585): avc: denied { sendto } for pid=23222 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.601:585): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.617:586): avc: denied { sendto } for pid=23225 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.617:586): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.618:587): avc: denied { sendto } for pid=23230 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.618:587): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=6f items=0 ppid=599 pid=23230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.619:588): avc: denied { sendto } for pid=23232 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.619:588): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7d items=0 ppid=599 pid=23232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.620:589): avc: denied { sendto } for pid=23233 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.620:589): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.721:590): avc: denied { sendto } for pid=23238 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.721:590): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.721:591): avc: denied { sendto } for pid=23239 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.721:591): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.723:592): avc: denied { sendto } for pid=23242 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.723:592): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.725:593): avc: denied { sendto } for pid=23243 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.725:593): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.732:594): avc: denied { sendto } for pid=23249 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.732:594): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.733:595): avc: denied { sendto } for pid=23252 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.733:595): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.734:596): avc: denied { sendto } for pid=23248 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.734:596): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.735:597): avc: denied { sendto } for pid=23255 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.735:597): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.736:598): avc: denied { sendto } for pid=23254 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.736:598): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.737:599): avc: denied { sendto } for pid=23256 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.737:599): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.839:600): avc: denied { sendto } for pid=23271 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.839:600): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.840:601): avc: denied { sendto } for pid=23272 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.840:601): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.848:602): avc: denied { sendto } for pid=23273 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.848:602): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.850:603): avc: denied { sendto } for pid=23275 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.850:603): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.852:604): avc: denied { sendto } for pid=23281 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.852:604): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.854:605): avc: denied { sendto } for pid=23282 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.854:605): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.885:606): avc: denied { sendto } for pid=23296 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.885:606): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=83 items=0 ppid=599 pid=23296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.886:607): avc: denied { sendto } for pid=23299 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.886:607): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=79 items=0 ppid=599 pid=23299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.929:608): avc: denied { sendto } for pid=23320 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.929:608): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=7b items=0 ppid=599 pid=23320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.941:609): avc: denied { sendto } for pid=23337 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.941:609): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=75 items=0 ppid=599 pid=23337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.941:610): avc: denied { sendto } for pid=23335 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.941:610): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=77 items=0 ppid=599 pid=23335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.985:611): avc: denied { sendto } for pid=23347 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.985:611): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.987:612): avc: denied { sendto } for pid=23350 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.987:612): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.988:613): avc: denied { sendto } for pid=23346 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.988:613): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530291.989:614): avc: denied { sendto } for pid=23353 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530291.989:614): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.003:615): avc: denied { sendto } for pid=23357 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.003:615): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.004:616): avc: denied { sendto } for pid=23356 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.004:616): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.006:617): avc: denied { sendto } for pid=23362 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.006:617): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.009:618): avc: denied { sendto } for pid=23361 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.009:618): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.011:619): avc: denied { sendto } for pid=23363 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.011:619): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.012:620): avc: denied { sendto } for pid=23364 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.012:620): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.012:621): avc: denied { sendto } for pid=23366 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.012:621): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.015:622): avc: denied { sendto } for pid=23367 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.015:622): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.015:623): avc: denied { sendto } for pid=23368 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.015:623): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.113:624): avc: denied { sendto } for pid=23370 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.113:624): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.118:625): avc: denied { sendto } for pid=23371 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.118:625): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.120:626): avc: denied { sendto } for pid=23372 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.120:626): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.170:627): avc: denied { sendto } for pid=23377 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.170:627): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.170:628): avc: denied { sendto } for pid=23378 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.170:628): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.172:629): avc: denied { sendto } for pid=23381 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.172:629): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.172:630): avc: denied { sendto } for pid=23382 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.172:630): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.189:631): avc: denied { sendto } for pid=23388 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.189:631): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.189:632): avc: denied { sendto } for pid=23387 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.189:632): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.190:633): avc: denied { sendto } for pid=23392 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.190:633): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.191:634): avc: denied { sendto } for pid=23393 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.191:634): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.195:635): avc: denied { sendto } for pid=23394 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.195:635): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.195:636): avc: denied { sendto } for pid=23395 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.195:636): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.297:637): avc: denied { sendto } for pid=23423 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.297:637): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.297:638): avc: denied { sendto } for pid=23422 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.297:638): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.299:639): avc: denied { sendto } for pid=23424 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.299:639): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.300:640): avc: denied { sendto } for pid=23425 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.300:640): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.301:641): avc: denied { sendto } for pid=23427 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.301:641): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.301:642): avc: denied { sendto } for pid=23426 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.301:642): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.303:643): avc: denied { sendto } for pid=23428 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.303:643): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.303:644): avc: denied { sendto } for pid=23429 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.303:644): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.304:645): avc: denied { sendto } for pid=23430 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.304:645): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.304:646): avc: denied { sendto } for pid=23431 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.304:646): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.306:647): avc: denied { sendto } for pid=23432 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530292.306:648): avc: denied { sendto } for pid=23433 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.306:647): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530292.306:648): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.307:649): avc: denied { sendto } for pid=23434 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.307:649): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.307:650): avc: denied { sendto } for pid=23435 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.307:650): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.309:651): avc: denied { sendto } for pid=23437 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.309:651): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.310:652): avc: denied { sendto } for pid=23439 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.310:652): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.310:653): avc: denied { sendto } for pid=23438 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.310:653): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.311:654): avc: denied { sendto } for pid=23441 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.311:654): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.312:655): avc: denied { sendto } for pid=23440 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.312:655): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.313:656): avc: denied { sendto } for pid=23443 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.313:656): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.313:657): avc: denied { sendto } for pid=23442 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.313:657): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.314:658): avc: denied { sendto } for pid=23444 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.314:658): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.708:659): avc: denied { sendto } for pid=23450 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.708:659): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.709:660): avc: denied { sendto } for pid=23453 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.709:660): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.710:661): avc: denied { sendto } for pid=23449 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.710:661): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.710:662): avc: denied { sendto } for pid=23454 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.710:662): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.718:663): avc: denied { sendto } for pid=23460 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.718:663): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.719:664): avc: denied { sendto } for pid=23464 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.719:664): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.721:665): avc: denied { sendto } for pid=23459 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.721:665): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.721:666): avc: denied { sendto } for pid=23466 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.721:666): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.723:667): avc: denied { sendto } for pid=23465 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.723:667): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.725:668): avc: denied { sendto } for pid=23467 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.725:668): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.826:669): avc: denied { sendto } for pid=23484 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.826:669): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.827:670): avc: denied { sendto } for pid=23485 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.827:670): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.832:671): avc: denied { sendto } for pid=23487 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=AVC msg=audit(1189530292.832:672): avc: denied { sendto } for pid=23486 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.832:671): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1189530292.832:672): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.834:673): avc: denied { sendto } for pid=23488 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.834:673): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530292.835:674): avc: denied { sendto } for pid=23489 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530292.835:674): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.978:675): avc: denied { sendto } for pid=23496 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.978:675): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.979:676): avc: denied { sendto } for pid=23495 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.979:676): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.981:677): avc: denied { sendto } for pid=23499 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.981:677): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.983:678): avc: denied { sendto } for pid=23500 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.983:678): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.989:679): avc: denied { sendto } for pid=23505 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.989:679): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530293.991:680): avc: denied { sendto } for pid=23506 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530293.991:680): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.093:681): avc: denied { sendto } for pid=23517 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.093:681): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.094:682): avc: denied { sendto } for pid=23518 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.094:682): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.097:683): avc: denied { sendto } for pid=23519 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.097:683): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.098:684): avc: denied { sendto } for pid=23520 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.098:684): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.100:685): avc: denied { sendto } for pid=23521 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.100:685): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.100:686): avc: denied { sendto } for pid=23522 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.100:686): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.104:687): avc: denied { sendto } for pid=23523 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.104:687): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.105:688): avc: denied { sendto } for pid=23524 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.105:688): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.106:689): avc: denied { sendto } for pid=23525 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.106:689): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.106:690): avc: denied { sendto } for pid=23526 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.106:690): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.190:691): avc: denied { sendto } for pid=23531 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.190:691): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.191:692): avc: denied { sendto } for pid=23532 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.191:692): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.193:693): avc: denied { sendto } for pid=23535 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.193:693): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.195:694): avc: denied { sendto } for pid=23537 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.195:694): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.204:695): avc: denied { sendto } for pid=23541 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.204:695): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.207:696): avc: denied { sendto } for pid=23543 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.207:696): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.308:697): avc: denied { sendto } for pid=23557 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.308:697): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.313:698): avc: denied { sendto } for pid=23560 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.313:698): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.314:699): avc: denied { sendto } for pid=23559 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.314:699): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.316:700): avc: denied { sendto } for pid=23562 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.316:700): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.318:701): avc: denied { sendto } for pid=23561 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.318:701): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.320:702): avc: denied { sendto } for pid=23564 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.320:702): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.321:703): avc: denied { sendto } for pid=23563 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.321:703): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.323:704): avc: denied { sendto } for pid=23566 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.323:704): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.325:705): avc: denied { sendto } for pid=23565 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.325:705): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530294.326:706): avc: denied { sendto } for pid=23567 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530294.326:706): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=ANOM_ABEND msg=audit(1189530295.547:707): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1986 comm="named" sig=6 >type=AVC msg=audit(1189530296.648:708): avc: denied { sendto } for pid=23580 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.648:708): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.649:709): avc: denied { sendto } for pid=23583 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.649:709): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.649:710): avc: denied { sendto } for pid=23579 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.649:710): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.650:711): avc: denied { sendto } for pid=23586 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.650:711): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.656:712): avc: denied { sendto } for pid=23589 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.656:712): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.657:713): avc: denied { sendto } for pid=23594 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.657:713): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.659:714): avc: denied { sendto } for pid=23590 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.659:714): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.659:715): avc: denied { sendto } for pid=23596 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.659:715): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.661:716): avc: denied { sendto } for pid=23595 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.661:716): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.662:717): avc: denied { sendto } for pid=23597 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.662:717): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.663:718): avc: denied { sendto } for pid=23599 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.663:718): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.665:719): avc: denied { sendto } for pid=23600 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.665:719): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.666:720): avc: denied { sendto } for pid=23601 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.666:720): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.764:721): avc: denied { sendto } for pid=23604 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.764:721): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.770:722): avc: denied { sendto } for pid=23605 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.770:722): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530296.772:723): avc: denied { sendto } for pid=23606 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530296.772:723): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.832:724): avc: denied { sendto } for pid=23613 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.832:724): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.835:725): avc: denied { sendto } for pid=23614 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.835:725): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.840:726): avc: denied { sendto } for pid=23612 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.840:726): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.843:727): avc: denied { sendto } for pid=23619 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.843:727): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.848:728): avc: denied { sendto } for pid=23620 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.848:728): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.849:729): avc: denied { sendto } for pid=23622 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.849:729): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.849:730): avc: denied { sendto } for pid=23625 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.849:730): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.851:731): avc: denied { sendto } for pid=23627 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.851:731): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.853:732): avc: denied { sendto } for pid=23626 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.853:732): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.854:733): avc: denied { sendto } for pid=23628 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.854:733): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.956:734): avc: denied { sendto } for pid=23643 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.956:734): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.956:735): avc: denied { sendto } for pid=23644 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.956:735): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.965:736): avc: denied { sendto } for pid=23645 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.965:736): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.966:737): avc: denied { sendto } for pid=23646 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.966:737): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.968:738): avc: denied { sendto } for pid=23648 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.968:738): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.968:739): avc: denied { sendto } for pid=23649 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.968:739): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.970:740): avc: denied { sendto } for pid=23650 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.970:740): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.970:741): avc: denied { sendto } for pid=23651 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.970:741): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.971:742): avc: denied { sendto } for pid=23652 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.971:742): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.971:743): avc: denied { sendto } for pid=23653 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.971:743): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.973:744): avc: denied { sendto } for pid=23654 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.973:744): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.973:745): avc: denied { sendto } for pid=23655 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.973:745): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.974:746): avc: denied { sendto } for pid=23656 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.974:746): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.974:747): avc: denied { sendto } for pid=23657 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.974:747): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.975:748): avc: denied { sendto } for pid=23658 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.975:748): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.976:749): avc: denied { sendto } for pid=23659 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.976:749): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.976:750): avc: denied { sendto } for pid=23660 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.976:750): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530297.977:751): avc: denied { sendto } for pid=23661 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530297.977:751): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.025:752): avc: denied { sendto } for pid=23667 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.025:752): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.026:753): avc: denied { sendto } for pid=23668 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.026:753): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.027:754): avc: denied { sendto } for pid=23672 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.027:754): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.028:755): avc: denied { sendto } for pid=23671 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.028:755): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.032:756): avc: denied { sendto } for pid=23678 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.032:756): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.033:757): avc: denied { sendto } for pid=23681 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.033:757): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.034:758): avc: denied { sendto } for pid=23677 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.034:758): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.034:759): avc: denied { sendto } for pid=23683 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.034:759): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8f items=0 ppid=599 pid=23683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.037:760): avc: denied { sendto } for pid=23682 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.037:760): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.037:761): avc: denied { sendto } for pid=23686 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.037:761): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=94 items=0 ppid=599 pid=23686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.038:762): avc: denied { sendto } for pid=23685 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.038:762): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=89 items=0 ppid=599 pid=23685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1189530298.041:763): avc: denied { sendto } for pid=23688 comm="udevd" path=002F6F72672F667265656465736B746F702F68616C2F756465765F6576656E74 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=user_u:system_r:unconfined_t:s0 tclass=unix_dgram_socket >type=SYSCALL msg=audit(1189530298.041:763): arch=40000003 syscall=102 success=no exit=-13 a0=b a1=bf937340 a2=80019240 a3=8e items=0 ppid=599 pid=23688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="udevd" exe="/sbin/udevd" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1189530298.129:7793): auditd normal halt, sending auid=4294967295 pid=23666 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1905 >type=DAEMON_START msg=audit(1189530463.736:6981): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1911 res=success, auditd pid=1911 >type=CONFIG_CHANGE msg=audit(1189530463.843:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189530463.843:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189530463.884:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189530463.884:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189530471.297:9): avc: denied { write } for pid=2026 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189530471.297:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdee400 a2=63a494 a3=0 items=0 ppid=1 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189530471.498:10): avc: denied { read write } for pid=2229 comm="modprobe" name="" dev=sockfs ino=9252 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189530471.498:10): avc: denied { read write } for pid=2229 comm="modprobe" name="" dev=sockfs ino=9262 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189530471.498:10): arch=40000003 syscall=11 success=yes exit=0 a0=98bb710 a1=bfb144d8 a2=bfb17910 a3=98bb710 items=0 ppid=2187 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189530471.498:10): path="socket:[9262]" >type=AVC_PATH msg=audit(1189530471.498:10): path="socket:[9252]" >type=AVC msg=audit(1189530480.843:11): avc: denied { getattr } for pid=2694 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189530480.843:11): arch=40000003 syscall=195 success=no exit=-13 a0=bfdc3ea8 a1=bfdc2d94 a2=816ff4 a3=d items=0 ppid=2693 pid=2694 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189530480.843:11): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189530480.970:12): avc: denied { getattr } for pid=2694 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189530480.970:12): arch=40000003 syscall=195 success=no exit=-13 a0=8411168 a1=bfdc5c5c a2=816ff4 a3=4 items=0 ppid=2693 pid=2694 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189530480.970:12): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_ERR msg=audit(1189530486.802:13): user pid=2857 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189530538.410:14): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189530538.414:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189530538.415:16): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189530538.419:17): login pid=2965 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189530538.427:18): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189530538.428:19): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189530590.058:20): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2719 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189530752.270:21): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189530752.271:22): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189530752.272:23): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189530752.278:24): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189530752.278:25): user pid=3428 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189530984.980:26): user pid=4025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189530984.980:27): user pid=4025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=matej : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1189530988.500:28): user pid=4331 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189544002.751:29): user pid=4799 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189544007.338:30): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:bluetooth_t:s0 pid=2118 comm="hcid" sig=6 >type=USER_AUTH msg=audit(1189544391.180:31): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189544391.181:32): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189544391.351:33): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189544426.305:34): user pid=5097 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189544461.649:35): user pid=5146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189546609.079:36): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189546609.079:37): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189546609.114:38): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189546609.120:39): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189546609.120:40): user pid=5425 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1189547268.149:41): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189547268.149:42): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1189547268.150:43): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1189547268.153:44): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1189547268.153:45): user pid=10393 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1189548061.738:46): user pid=10501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189551661.811:47): user pid=10764 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189552678.473:48): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189552678.473:49): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189552678.475:50): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189552678.483:51): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189552678.483:52): user pid=10933 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189552684.090:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189552684.090:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf945a28 a3=6 items=0 ppid=1 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189552692.340:54): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189552777.804:55): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189552777.804:55): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bf945a28 a3=6 items=0 ppid=1 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189553088.193:56): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=11042 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189553383.938:57): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1189553383.938:58): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_ACQ msg=audit(1189553384.008:59): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1189553384.026:60): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1189553384.026:61): user pid=11128 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189554315.257:62): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189555261.863:63): user pid=11446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189558199.499:64): user pid=12313 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189579791.556:65): user pid=12758 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189579833.293:66): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189579833.293:67): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189579833.294:68): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189579833.330:69): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189579833.331:70): user pid=13087 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189580461.344:71): user pid=14051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189580566.499:72): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189580887.721:73): user pid=14620 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189582445.424:74): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189582445.424:75): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189582445.455:76): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189582445.476:77): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189582445.476:78): user pid=14824 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189582454.196:79): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189582454.198:80): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189582454.198:81): user pid=15137 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189582510.962:82): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189582510.963:83): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189582510.963:84): user pid=15143 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189584061.743:85): user pid=15329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189587661.779:86): user pid=15445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1189589497.266:87): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=25568 comm="firefox-bin" sig=6 >type=ANOM_ABEND msg=audit(1189589625.390:88): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=28482 comm="firefox-bin" sig=6 >type=USER_ACCT msg=audit(1189591261.816:89): user pid=28726 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_LOGIN msg=audit(1189592929.021:90): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=matej: exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' >type=USER_AUTH msg=audit(1189592931.686:91): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1189592931.687:92): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1189592931.865:93): user pid=28944 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=LOGIN msg=audit(1189592931.866:94): login pid=28944 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189592931.867:95): user pid=28944 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1189592931.868:96): user pid=28946 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=ssh res=success)' >type=USER_LOGIN msg=audit(1189592931.890:97): user pid=28944 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=chelcicky.local, addr=192.168.1.4, terminal=/dev/pts/1 res=success)' >type=USER_AUTH msg=audit(1189592940.464:98): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189592940.465:99): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189592940.466:100): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189592940.473:101): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189592940.473:102): user pid=28977 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1189592957.093:103): avc: denied { write } for pid=29105 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189592957.093:103): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc07210 a2=63a494 a3=0 items=0 ppid=1 pid=29105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=DAEMON_START msg=audit(1189593815.848:3366): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929 >type=CONFIG_CHANGE msg=audit(1189593815.948:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189593815.948:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189593816.204:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189593816.204:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189593823.185:9): avc: denied { write } for pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189593823.185:9): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8d6ee0 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189593823.260:10): avc: denied { read write } for pid=2247 comm="modprobe" name="" dev=sockfs ino=9457 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189593823.260:10): avc: denied { read write } for pid=2247 comm="modprobe" name="" dev=sockfs ino=9473 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189593823.260:10): arch=40000003 syscall=11 success=yes exit=0 a0=9fe4710 a1=bf9fc518 a2=bf9ff950 a3=9fe4710 items=0 ppid=2206 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189593823.260:10): path="socket:[9473]" >type=AVC_PATH msg=audit(1189593823.260:10): path="socket:[9457]" >type=AVC msg=audit(1189593832.836:11): avc: denied { getattr } for pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189593832.836:11): arch=40000003 syscall=195 success=no exit=-13 a0=bfacc928 a1=bfacb814 a2=816ff4 a3=d items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189593832.836:11): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189593832.858:12): avc: denied { getattr } for pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189593832.858:12): arch=40000003 syscall=195 success=no exit=-13 a0=9a54168 a1=bface6dc a2=816ff4 a3=4 items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189593832.858:12): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_ERR msg=audit(1189593837.692:13): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189593846.849:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2753 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189593890.638:15): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189593890.642:16): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189593890.643:17): user pid=2981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189593890.645:18): login pid=2981 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189593890.654:19): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189593890.654:20): user pid=2981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189594861.155:21): user pid=3348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=DAEMON_START msg=audit(1189595145.537:7173): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1929 res=success, auditd pid=1929 >type=CONFIG_CHANGE msg=audit(1189595145.637:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189595145.637:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189595145.807:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189595145.807:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189595152.796:9): avc: denied { read write } for pid=2245 comm="modprobe" name="" dev=sockfs ino=9294 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189595152.796:9): avc: denied { read write } for pid=2245 comm="modprobe" name="" dev=sockfs ino=9308 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189595152.796:9): arch=40000003 syscall=11 success=yes exit=0 a0=9cc1710 a1=bfc57e28 a2=bfc5b260 a3=9cc1710 items=0 ppid=2205 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189595152.796:9): path="socket:[9308]" >type=AVC_PATH msg=audit(1189595152.796:9): path="socket:[9294]" >type=AVC msg=audit(1189595152.905:10): avc: denied { write } for pid=2044 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189595152.905:10): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf86f680 a2=63a494 a3=0 items=0 ppid=1 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189595161.147:11): avc: denied { getattr } for pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189595161.147:11): arch=40000003 syscall=195 success=no exit=-13 a0=bf807f28 a1=bf806e14 a2=816ff4 a3=d items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189595161.147:11): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=AVC msg=audit(1189595161.192:12): avc: denied { getattr } for pid=2712 comm="hald" name="20-video-quirk-pm-hp.fdi" dev=dm-0 ino=5850496 scontext=system_u:system_r:hald_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1189595161.192:12): arch=40000003 syscall=195 success=no exit=-13 a0=8ba3768 a1=bf809cdc a2=816ff4 a3=4 items=0 ppid=2711 pid=2712 auid=4294967295 uid=68 gid=68 euid=68 suid=68 fsuid=68 egid=68 sgid=68 fsgid=68 tty=(none) comm="hald" exe="/usr/sbin/hald" subj=system_u:system_r:hald_t:s0 key=(null) >type=AVC_PATH msg=audit(1189595161.192:12): path="/usr/share/hal/fdi/information/10freedesktop/20-video-quirk-pm-hp.fdi" >type=USER_ERR msg=audit(1189595167.248:13): user pid=2875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189595169.910:14): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2762 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189595182.102:15): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189595182.106:16): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189595182.107:17): user pid=2978 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189595182.112:18): login pid=2978 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189595182.121:19): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189595182.121:20): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189596301.278:21): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3868 comm="ffmpeg" sig=11 >type=ANOM_ABEND msg=audit(1189596344.541:22): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3881 comm="ffmpeg" sig=11 >type=USER_ACCT msg=audit(1189598462.139:23): user pid=4348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189602061.267:24): user pid=5688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189603513.500:25): user pid=6676 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189616635.846:26): user pid=7117 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189616680.690:27): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189616680.690:28): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189616680.732:29): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189616680.753:30): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189616680.753:31): user pid=7370 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189616753.392:32): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189616753.393:33): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189616753.393:34): user pid=7995 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189620061.453:35): user pid=8780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189620090.048:36): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189620090.048:37): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189620090.078:38): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189620090.081:39): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189620090.081:40): user pid=8784 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189620109.998:41): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189620109.999:42): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189620110.000:43): user pid=8820 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189623535.206:44): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_AUTH msg=audit(1189623537.768:45): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189623537.768:46): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189623537.768:47): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189623537.775:48): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189623537.775:49): user pid=9183 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189623541.139:50): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189623541.139:51): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189623541.261:52): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189623603.012:53): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189623603.012:53): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1189623661.693:54): user pid=9276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189624096.318:55): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189624119.941:56): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189624119.941:57): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189624120.047:58): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189624128.421:59): user pid=9326 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189624183.142:60): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189624183.142:60): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_END msg=audit(1189624197.560:61): user pid=9216 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189624216.807:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=9346 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189624216.841:63): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189624248.120:64): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189624248.120:64): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189624249.214:65): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=9395 comm="qemu-kvm" sig=6 >type=ANOM_PROMISCUOUS msg=audit(1189624249.258:66): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189624263.443:67): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189624263.443:68): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189624263.448:69): user pid=9435 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189624315.200:70): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189624315.200:70): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189624441.118:71): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189626391.127:72): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189626391.128:73): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626391.166:74): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626391.168:75): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626391.168:76): user pid=10935 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626398.368:77): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626398.370:78): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626398.370:79): user pid=10941 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189626885.042:80): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189626885.042:81): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626885.043:82): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626885.044:83): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626885.045:84): user pid=11325 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626889.158:85): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626889.160:86): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626889.160:87): user pid=11329 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626902.199:88): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626902.201:89): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626902.201:90): user pid=11340 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189626905.208:91): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189626905.209:92): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189626905.210:93): user pid=11343 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189627034.430:94): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189627034.432:95): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189627034.432:96): user pid=11416 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189627071.932:97): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189627071.933:98): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189627071.933:99): user pid=11438 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189627261.970:100): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189627289.340:101): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189627289.341:102): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189627289.371:103): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189627289.377:104): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189627289.377:105): user pid=11683 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189630861.189:106): user pid=13778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189634461.425:107): user pid=15120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189638061.452:108): user pid=15232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189641661.482:109): user pid=15344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189645261.521:110): user pid=15456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189648861.557:111): user pid=15572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1189648921.571:112): user pid=15577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1189651191.499:113): user pid=16504 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189672653.811:114): user pid=16919 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189672685.576:115): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189672685.577:116): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1189672685.696:117): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1189672706.781:118): user pid=17215 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189672719.980:119): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1189672722.038:120): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189672722.038:121): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189672722.039:122): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189672722.086:123): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189672722.086:124): user pid=17251 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1189672739.064:125): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189672739.064:126): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189672739.165:127): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189672747.269:128): user pid=17286 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189672750.500:129): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189672750.501:130): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189672750.512:131): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189672798.784:132): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189672798.784:132): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189672849.647:133): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189672859.225:134): user pid=17291 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189672903.074:135): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189672903.074:135): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189673231.869:136): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189673231.869:137): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1189673231.907:138): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189673231.912:139): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189673231.912:140): user pid=17475 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1189673246.118:141): avc: denied { write } for pid=17530 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189673246.118:141): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfbcdf00 a2=63a494 a3=0 items=0 ppid=1 pid=17530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189673271.190:142): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189673305.297:143): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189673305.298:144): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189673305.310:145): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189673312.524:146): user pid=17560 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189673320.165:147): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189673320.165:147): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189673375.689:148): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189673376.724:149): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189673376.724:149): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3098 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189673399.121:150): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189673399.121:151): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189673399.126:152): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189673399.390:153): user pid=17638 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1189673409.887:154): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189673409.887:155): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189673409.892:156): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189673417.207:157): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189673430.189:158): user pid=17645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189673459.158:159): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189673459.158:159): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189673539.424:160): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189673610.582:161): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189673610.582:162): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189673610.594:163): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189673615.622:164): user pid=17724 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189673813.554:165): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189673813.554:165): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189673871.140:166): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1189673871.140:167): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1189673871.140:168): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1189673871.147:169): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1189673871.147:170): user pid=17800 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189673955.308:171): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189673957.841:172): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1189673957.841:173): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1189673957.872:174): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1189673963.475:175): user pid=17850 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1189674061.578:176): user pid=17864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1189674164.752:177): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=17975 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189674196.704:178): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189674196.704:179): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189674196.709:180): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189674243.337:181): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189674243.337:181): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189674398.442:182): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189674404.434:183): user pid=17994 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189674998.323:184): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189674998.323:184): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189675034.021:185): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189675034.021:186): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189675034.026:187): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189675042.058:188): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189675049.307:189): user pid=18235 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189675082.499:190): user pid=18643 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1189679173.724:191): user pid=18894 uid=0 auid=500 subj=user_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_STATUS msg=audit(1189679206.977:192): enforcing=0 old_enforcing=1 auid=500 >type=SYSCALL msg=audit(1189679206.977:192): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bfd1fe84 a2=1 a3=bfd1fe84 items=0 ppid=17251 pid=19042 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=user_u:system_r:unconfined_t:s0 key=(null) >type=USER_AVC msg=audit(1189679206.981:193): user pid=9226 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='avc: received setenforce notice (enforcing=0) : exe="/bin/dbus-daemon" (sauid=0, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1189679207.019:194): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=ANOM_PROMISCUOUS msg=audit(1189679212.534:195): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189679212.534:195): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bffa3088 a3=6 items=0 ppid=1 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189679267.328:196): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189679267.328:197): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189679267.385:198): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189679275.480:199): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_END msg=audit(1189679286.031:200): user pid=19077 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1189679469.503:201): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=19155 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189679581.386:202): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189679581.386:203): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189679581.388:204): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189679581.391:205): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189679581.391:206): user pid=21701 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1189679617.415:207): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=21950 comm="hald-addon-acpi" sig=11 >type=DAEMON_END msg=audit(1189679727.071:7174): auditd normal halt, sending auid=500 pid=21994 subj=user_u:system_r:initrc_t:s0 res=success, auditd pid=1929 >type=DAEMON_START msg=audit(1189679727.208:8753): auditd start, ver=1.5.6, format=raw, auid=500 pid=22010 res=success, auditd pid=22010 >type=CONFIG_CHANGE msg=audit(1189679727.308:211): audit_enabled=1 old=1 by auid=500 subj=user_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189679727.308:212): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1189679727.318:213): audit_backlog_limit=320 old=320 by auid=500 subj=user_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189679727.318:214): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=AVC msg=audit(1189679760.441:215): avc: denied { read } for pid=22048 comm="setroubleshootd" name=".rpmmacros" dev=dm-5 ino=6635551 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1189679760.441:215): arch=40000003 syscall=195 success=yes exit=0 a0=bfb36430 a1=bfb365cc a2=816ff4 a3=bfb36430 items=0 ppid=1 pid=22048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189679760.852:216): avc: denied { write } for pid=22048 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=AVC msg=audit(1189679760.852:216): avc: denied { connectto } for pid=22048 comm="setroubleshootd" name="system_bus_socket" scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1189679760.852:216): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfb4dcd0 a2=63a494 a3=0 items=0 ppid=1 pid=22048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC_PATH msg=audit(1189679760.852:216): path="/var/run/dbus/system_bus_socket" >type=USER_AVC msg=audit(1189679760.855:217): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=22048 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AVC msg=audit(1189679760.857:218): user pid=2124 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { acquire_svc } for service=com.redhat.setroubleshootd spid=22048 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1189679792.207:219): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189679792.207:220): user pid=2978 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189679796.888:221): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2609 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189679805.179:222): avc: denied { read write } for pid=22550 comm="modprobe" name="" dev=sockfs ino=1228719 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189679805.179:222): arch=40000003 syscall=11 success=yes exit=0 a0=9709538 a1=bfa38dc8 a2=bfa3b6a0 a3=9709538 items=0 ppid=22549 pid=22550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189679805.179:222): path="socket:[1228719]" >type=ANOM_ABEND msg=audit(1189679808.919:223): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=2010 comm="named" sig=6 >type=DAEMON_END msg=audit(1189679811.859:8754): auditd normal halt, sending auid=4294967295 pid=22995 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=22010 >type=DAEMON_START msg=audit(1189680003.449:3899): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1912 res=success, auditd pid=1912 >type=CONFIG_CHANGE msg=audit(1189680003.548:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189680003.548:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189680003.998:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189680003.998:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189680009.912:9): avc: denied { read write } for pid=2125 comm="hid2hci" name="001" dev=tmpfs ino=5495 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189680009.912:9): arch=40000003 syscall=5 success=no exit=-13 a0=bf9c7dfc a1=2 a2=1 a3=bf9c7dfc items=0 ppid=2112 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189680009.913:10): avc: denied { read } for pid=2125 comm="hid2hci" name="001" dev=tmpfs ino=5495 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189680009.913:10): arch=40000003 syscall=5 success=no exit=-13 a0=bf9c7dfc a1=0 a2=1 a3=bf9c7dfc items=0 ppid=2112 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189680011.459:11): avc: denied { read write } for pid=2228 comm="modprobe" name="" dev=sockfs ino=9174 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189680011.459:11): avc: denied { read write } for pid=2228 comm="modprobe" name="" dev=sockfs ino=9196 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189680011.459:11): arch=40000003 syscall=11 success=yes exit=0 a0=8e90710 a1=bf849a18 a2=bf84ce50 a3=8e90710 items=0 ppid=2188 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189680011.459:11): path="socket:[9196]" >type=AVC_PATH msg=audit(1189680011.459:11): path="socket:[9174]" >type=AVC msg=audit(1189680011.672:12): avc: denied { write } for pid=2027 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189680011.672:12): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff5cd70 a2=63a494 a3=0 items=0 ppid=1 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189680024.394:13): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2722 comm="hald-addon-acpi" sig=11 >type=USER_ERR msg=audit(1189680027.193:14): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189680050.892:15): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189680050.895:16): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189680050.896:17): user pid=2965 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189680050.902:18): login pid=2965 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189680050.922:19): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189680050.924:20): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189680108.374:21): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189680108.375:22): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189680108.375:23): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189680108.378:24): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189680108.378:25): user pid=3333 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189680113.695:26): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1189680113.695:27): user pid=2965 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1189680116.959:28): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:dhcpc_t:s0 pid=2594 comm="dhcdbd" sig=6 >type=AVC msg=audit(1189680122.263:29): avc: denied { read write } for pid=3823 comm="modprobe" name="" dev=sockfs ino=17734 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189680122.263:29): avc: denied { read write } for pid=3823 comm="modprobe" name="" dev=sockfs ino=17735 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189680122.263:29): arch=40000003 syscall=11 success=yes exit=0 a0=8316530 a1=bf838568 a2=bf83ae40 a3=8316530 items=0 ppid=3822 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189680122.263:29): path="socket:[17735]" >type=AVC_PATH msg=audit(1189680122.263:29): path="socket:[17734]" >type=ANOM_ABEND msg=audit(1189680123.697:30): auid=4294967295 uid=25 gid=25 subj=system_u:system_r:named_t:s0 pid=1993 comm="named" sig=6 >type=DAEMON_END msg=audit(1189680124.080:3900): auditd normal halt, sending auid=4294967295 pid=4263 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1912 >type=DAEMON_START msg=audit(1189680449.427:263): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1937 res=success, auditd pid=1937 >type=CONFIG_CHANGE msg=audit(1189680449.538:66): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189680449.538:67): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189680449.567:68): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189680449.567:69): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189680457.127:70): avc: denied { write } for pid=2052 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189680457.127:70): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfe0a410 a2=63a494 a3=0 items=0 ppid=1 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189680457.222:71): avc: denied { read write } for pid=2255 comm="modprobe" name="" dev=sockfs ino=19871 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189680457.222:71): avc: denied { read write } for pid=2255 comm="modprobe" name="" dev=sockfs ino=19892 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189680457.222:71): arch=40000003 syscall=11 success=yes exit=0 a0=98b0710 a1=bf99eb68 a2=bf9a1fa0 a3=98b0710 items=0 ppid=2211 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189680457.222:71): path="socket:[19892]" >type=AVC_PATH msg=audit(1189680457.222:71): path="socket:[19871]" >type=USER_ERR msg=audit(1189680468.038:72): user pid=2883 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1189680468.161:73): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2749 comm="hald-addon-acpi" sig=11 >type=USER_AUTH msg=audit(1189680498.815:74): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189680498.818:75): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189680498.819:76): user pid=2984 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189680498.825:77): login pid=2984 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189680498.846:78): user pid=2984 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189680498.847:79): user pid=2984 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189680539.864:80): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189680539.865:81): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189680539.866:82): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189680539.874:83): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189680539.875:84): user pid=3357 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1189680655.932:85): auid=500 uid=68 gid=68 subj=user_u:system_r:hald_t:s0 pid=3455 comm="hald-addon-acpi" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1189681009.384:86): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189681009.384:86): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189681054.036:87): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1189681188.773:88): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189681188.773:89): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189681188.883:90): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189681198.810:91): user pid=4131 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189681225.418:92): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189681225.418:92): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189681225.896:93): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_ACCT msg=audit(1189681261.542:94): user pid=4182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1189681345.219:95): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189681345.219:96): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189681345.223:97): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189681348.889:98): user pid=4192 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189681428.380:99): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189681428.380:99): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1189681531.432:100): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189681703.556:101): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189681703.556:101): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189681764.582:102): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=4292 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189682547.836:103): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189682547.836:104): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189682548.105:105): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189682562.014:106): user pid=4328 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189682597.513:107): dev=vnet1 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189682597.513:107): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfb7d468 a3=6 items=0 ppid=1 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=DAEMON_START msg=audit(1189682733.393:2570): auditd start, ver=1.5.6, format=raw, auid=4294967295 pid=1939 res=success, auditd pid=1939 >type=CONFIG_CHANGE msg=audit(1189682733.493:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189682733.493:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1189682733.745:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1189682733.745:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=AVC msg=audit(1189682739.355:9): avc: denied { read write } for pid=2152 comm="hid2hci" name="001" dev=tmpfs ino=5638 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189682739.355:9): arch=40000003 syscall=5 success=no exit=-13 a0=bf85f48c a1=2 a2=1 a3=bf85f48c items=0 ppid=2139 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189682739.355:10): avc: denied { read } for pid=2152 comm="hid2hci" name="001" dev=tmpfs ino=5638 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1189682739.355:10): arch=40000003 syscall=5 success=no exit=-13 a0=bf85f48c a1=0 a2=1 a3=bf85f48c items=0 ppid=2139 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hid2hci" exe="/usr/sbin/hid2hci" subj=system_u:system_r:bluetooth_t:s0 key=(null) >type=AVC msg=audit(1189682740.630:11): avc: denied { write } for pid=2054 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189682740.630:11): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfdf6c00 a2=63a494 a3=0 items=0 ppid=1 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1189682740.854:12): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9348 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=AVC msg=audit(1189682740.854:12): avc: denied { read write } for pid=2257 comm="modprobe" name="" dev=sockfs ino=9356 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=rawip_socket >type=SYSCALL msg=audit(1189682740.854:12): arch=40000003 syscall=11 success=yes exit=0 a0=8805710 a1=bf97ab48 a2=bf97df80 a3=8805710 items=0 ppid=2217 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=AVC_PATH msg=audit(1189682740.854:12): path="socket:[9356]" >type=AVC_PATH msg=audit(1189682740.854:12): path="socket:[9348]" >type=USER_ERR msg=audit(1189682755.070:13): user pid=2885 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1189682768.712:14): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1189682768.716:15): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1189682768.717:16): user pid=2986 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1189682768.723:17): login pid=2986 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1189682768.743:18): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=matej : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1189682768.745:19): user pid=2986 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=viklef.ceplovi.cz, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1189682841.681:20): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189682841.682:21): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189682841.683:22): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189682841.692:23): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189682841.692:24): user pid=3363 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189682898.945:25): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189682898.945:25): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf698 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1189684861.903:26): user pid=3524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189685502.735:27): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=ANOM_PROMISCUOUS msg=audit(1189685504.415:28): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1189685504.415:28): arch=40000003 syscall=54 success=yes exit=0 a0=7 a1=89a2 a2=bfdaf6a8 a3=6 items=0 ppid=1 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1189686379.420:29): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189686379.420:30): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189686379.465:31): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189686379.480:32): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189686379.480:33): user pid=3645 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1189686431.313:34): avc: denied { write } for pid=3750 comm="setroubleshootd" name="system_bus_socket" dev=dm-0 ino=1275160 scontext=user_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1189686431.313:34): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff3aae0 a2=63a494 a3=0 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=user_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AVC msg=audit(1189686637.211:35): user pid=2134 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1189686637.154:36): policy loaded auid=500 >type=SYSCALL msg=audit(1189686637.154:36): arch=40000003 syscall=4 success=yes exit=1587291 a0=4 a1=b7d75000 a2=18385b a3=bfdef1a8 items=0 ppid=3788 pid=3789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=user_u:system_r:load_policy_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1189687204.118:37): auid=500 uid=500 gid=500 subj=user_u:system_r:unconfined_t:s0 pid=3900 comm="telepathy-gabbl" sig=6 >type=ANOM_ABEND msg=audit(1189687521.244:38): auid=500 uid=0 gid=0 subj=user_u:system_r:unconfined_t:s0 pid=3603 comm="virt-viewer" sig=11 >type=USER_AUTH msg=audit(1189687531.424:39): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1189687531.425:40): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189687531.471:41): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189687531.507:42): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189687531.507:43): user pid=4080 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1189687538.867:44): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189687538.871:45): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189687538.871:46): user pid=4081 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_PROMISCUOUS msg=audit(1189687547.705:47): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=CRED_ACQ msg=audit(1189687801.580:48): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1189687801.582:49): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1189687801.582:50): user pid=4165 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1189688382.988:51): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189688382.989:52): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1189688383.026:53): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1189688383.034:54): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1189688383.034:55): user pid=4285 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1189688461.993:56): user pid=4323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 289371
: 194701